From the samples seen by BleepingComputer, the stolen data includes users’ full name, email address, MD5 hashed passwords, company name, phone number, address, PayPal email (if used), and IP address.
Source: cyware.com