The security incident was linked to a limited number of customer loyalty accounts.