Not a direct breach, but the personal data is affected nonetheless.