A 2022 cyber attack led to thousands of customers having their highly sensitive financial and identity details stolen and published on the dark web.