In late April, the company shut off parts of its IT systems after the attack, in which hackers accessed and extracted members’ personal data.