NetGalley data breach may have exposed user information