Millions of people were affected by breach, which firm previously said did not involve bank details. Curated from BBC News