McDonald's said that customer information was exposed after a security breach involving an email marketing management firm.