For at least two months , a former employee used customer information inappropriately . This information would have included names , addresses , DOB , CCN and SSN . The employee used some of these cards to make fraudulent purchases . ;