The fast food chain said hackers used email addresses and passwords they got from a third-party source to access some accounts last month.