I just received an email stating account (photo, email, name, username, social media handles), usage (subscription plan, billing history, browser/device info, ip address), and billing details (name, address, tax id, billing email, last four digits of credit cards, expiration dates) were all compromised.
Great job, guys.