Current and former customers of the US telecoms firm are impacted by the breach, the company says.