A Facebook post for staff said: "The information included names, addresses and bank account details of colleagues. This affects colleagues from all levels of the organisation.
"We are taking this extremely seriously. Dalton Philips is leading the response."
But one person commented on the site: "I haven't been informed of this and shouldn't have to read it on here."
More top news
Late weather update with Jon Mitchell
Former Royal Marine Konstandinos Erik Scurfield from Barnsley has been killed while fighting against Islamic State militants in Syria.
Steve Bruce has been accused of trying to "defend the indefensible" over Maynor Figueroa's tackle on Stephen Ireland.