Names, email addresses and other contact details of users from around the world could also have been taken