About 40,000 customers of a major hardware chain have had their data leaked, including credit card details, mobile numbers and email addresses.