The Montreal car-sharing company said it was hit by a potential data breach after one of its employees tried to access customers' personal information.