I can't read the article because it's behind a paywall, so I'll ask here: What information was handed over specifically? The IP address of when the account was created? The payment details? Unencrypted data? Login information? Device data? Something else?