A Facebook post for staff said: "The information included names, addresses and bank account details of colleagues. This affects colleagues from all levels of the organisation.
"We are taking this extremely seriously. Dalton Philips is leading the response."
But one person commented on the site: "I haven't been informed of this and shouldn't have to read it on here."
More top news
A 'Don't Drink and Drown' campaign is to be launched today following the inquest into the death of York student, Megan Roberts.
Weather update for Yorkshire and Lincolnshire.
Weather update for Yorkshire and Lincolnshire