(Source: CNET) An unauthorized user had access to the AMCA’s web payments system, which contained personal information such as financial data, Social Security numbers .