Payment method, currency type and purchase amount were leaked, but card numbers, names and contact details were not, according to reports.