The payday lender says bank account numbers and home addresses were among the information stolen.