Breach could also allow hackers to access logins associated with email accounts