The agency said information inappropiately accessed or obtained includes full names, home addresses, Social Security numbers, and banking information.