What kind of data was stolen? Well, it “may have included” your name, email address, security questions and answers (possibly not encrypted) and password.