The security incident involving a third-party service may have resulted in customer information being accessed by an unauthorized party.