Credit card information for water customers who made payments in person and automatically online may have been breached in addition to those who made individual payments online.