by Oliver Effron, CNN Business

(CNN) — Drizly confirmed it suffered a massive breach earlier this month, saying data from 2.5 million accounts may have been stolen.

The alcohol delivery service confirmed Wednesday that a hacker acquired some of its customer data, including emails, date-of-birth information, passwords, and in some cases, addresses. The breach was first reported by TechCrunch.

READ MORE: Spurs Best Celtics 96-88 Despite Blowing 24-Point Lead

Drizly discovered the hack on July 13 and “quickly took steps to tighten security and further reduce risk of attack,” the company said in a statement. The company encouraged customers to change their passwords nonetheless.

READ MORE: Moderna Seeks To Develop Variant-Specific Boosters For COVID-19 Mutations Like Omicron

“This is an ongoing investigation,” a Drizly spokesperson said. “We have been in contact with and are cooperating with federal law enforcement.”

TechCrunch reported that it uncovered a dark web marketplace that claimed to sell Drizly credit card account details. Drizly told CNN Business that “with 100% certainty, no financial information — from neither credit nor debit cards — was compromised.” TechCrunch also reported that hackers may have obtained phone numbers, IP addresses, and geolocation data.

MORE NEWS: Gov. Charlie Baker Says Biden's Air Travel Restrictions Are 'The Right Move'

™ & © 2020 Cable News Network, Inc., a WarnerMedia Company. All rights reserved.