The stolen data included transaction histories, account balances, and internal documentation accessible to support agents; however, the attackers never obtained passwords, private keys, or wallet access.