The data-management firm's customer database held names, email addresses, some IP addresses and more: a wealth of ammo for phishers.