The credit-reporting agency says hackers gained access to tax records and email addresses in addition to social security numbers and birthdays.