A Facebook post for staff said: "The information included names, addresses and bank account details of colleagues. This affects colleagues from all levels of the organisation.
"We are taking this extremely seriously. Dalton Philips is leading the response."
But one person commented on the site: "I haven't been informed of this and shouldn't have to read it on here."
More top news
Camelot has revealed that the winning ticket was sold in South Kesteven in Lincolnshire and are urging players to check their tickets.
Worsbrough Mill in Barnsley have launched a nationwide search to find a new miller.
Cyber stalkers and scammers rely on careless posts and lax security. Here are the key ways to keep your personal information private.