A Facebook post for staff said: "The information included names, addresses and bank account details of colleagues. This affects colleagues from all levels of the organisation.
"We are taking this extremely seriously. Dalton Philips is leading the response."
But one person commented on the site: "I haven't been informed of this and shouldn't have to read it on here."