Fireworks said the incident affected a “limited number of customer accounts” — all of whom were notified of the attack.