An unknown hacker gained access to the wallet maker's marketing database, stealing a million email addresses as well as personal information for 9,000 customers.