The company said the incident involved “unauthorized access and copying of some current and former employee data, as well as limited company information regarding some business partners.”