An unauthorized user accessed online prescription company PillPack's customer email addresses and passwords to log into their online accounts.