It seems that it’s only Username & Passwords. Foxtons remain silent on how securely passwords were stored, whether they were salted or encrypted (PCI DSS…)
http://www.wired.co.uk/news/archive/2013-08/20/foxtons-allegedly-hacked
Also people commonly use the same password across multiple sites so time to get changing.
