The small business says the hackers managed to get past tight password security and an in-house firewall to steal bank details and customer contact information.