The breach includes a huge volume of data not just of Epik customers, but also WHOIS records belonging to individuals and organisations who were not Epik customers.
The data included over 15 million unique email addresses (including anonymised versions for domain privacy), names, phone numbers, physical addresses, purchases and passwords stored in various formats