The company said it would work with affected internet service providers to urge users to change their passwords, while continuing to investigate the extent of the damage.