Those impacted were notified a “threat actor” accessed files sometime between Aug. 14 and Sept. 17, obtaining potentially ...