The company says it has taken steps to contain the breach and has started an investigation with the help of external cybersecurity experts.