Telephone numbers, email addresses and home addresses could also have been taken but bank details and passwords were not ...