In a notification letter sent to those affected, the company claims an “unauthorized party” gained access to a third-party ...