Most customers' name, email and frequent flyer details were stolen. But so too was this personal data, the company said.