The city said it is trying to determine what type of data was taken and how much, but it could potentially include sensitive information.