Online attack exposes 197,000 personal records