Names, email addresses, phone numbers and social media access tokens were exposed.