Hackers stole names, addresses, Social Security numbers, credit/debit card numbers, and other information from a third-party management platform.