Hackers could potentially get unauthorised access to sensitive user data such as passwords, banking information, addresses, and other personal details