ABTA says passwords were encrypted, mitigating risk, following attack on third party hosting provider