Users of the streaming service received a warning that emails, usernames and hashed passwords for a limited group of customers were exposed.