According to a lawsuit against the company, the data breach exposed sensitive information which includes, but is not limited to: full names; current and past addresses (dating back at least three decades); Social Security numbers; family information of parents, siblings and other relatives (including some who have been deceased for over 20 years); and/or other personal information.