It is likely that the third party was able to download the xat registered user database. This consists of registered usernames, email address, a hashed version of the password and ip address. We do not store real names, addresses, financial data, dates of birth or similar personal information