The data included usernames, email addresses, enrollment information and messages, but not login credentials.