Major wallet provider reports sensitive customer data leak