Failure to encrypt data allows access to real names, genders, email addresses, location and more; company say no indication info leaked