About 8.7 million customers had their data accessed and a ransom was demanded.