The Hong Kong company said that personal information of five million people had been compromised, including the names and birth dates of children.