Theater company The Shubert Organization has reportedly disclosed a data breach that compromised the personal information of its theater customers.

A May 16 notification letter sent to impacted individuals says that an authorized party had accessed certain Shubert employees’ email accounts, which contained customer information including names and credit card numbers and expiration dates. The letter was printed in a report from TicketNews earlier this week.

The breach took place between Feb. 8 and 11, and was discovered on Feb. 11. Shubert’s letter states that a subsequent investigation was unable to determine the full “scope of the information that was accessed,” or whether the intruder actually accessed the customers’ information.

In response to the incident, the company said it contacted state regulators at the attorney general’s office, is offering exposed customers 24 months of free credit monitoring services, and continues to update security measures and training.

Shubert is the owner and operator of 17 Broadway theaters and six off-Broadway venues, as well as a ticketing service Shubert Ticket.