Hackers stole "cardholder name, credit or debit card number, expiration date, cardholder verification value, and service code," among other data, the company said earlier on Thursday.