Carousell said that no password-related information was compromised in the breach, and that it was unlikely that the incident would result in identity theft.