A spokesperson for the company said an "unauthorized actor" accessed and stole sensitive customer information.