The money transfer giant said hackers also stole some customer Social Security numbers during the September cyberattack.