Email addresses, phone numbers, vehicle registrations and postcodes of up to 8.7 million customers were stolen