The breach exposed private direct messages exchanged between AI agents, email addresses of more than 6,000 human owners, and over one million login credentials.