The breach compromised 28,000 records, exposing such data as names, phone numbers, physical addresses, and email addresses.

 https://www.techrepublic.com/article/sans-cybersecurity-training-firm-suffers-data-breach-due-to-phishing-attack/