The original article about this on the OS has been updated. The club has been informed by the service provider that no password or payment data has been compromised.