The company says it has addressed the issue and it "did not provide anyone access to information they weren't already authorised to see".