It culled the data from info reported by 3 million of its members, about intra-company promotions (within the same company, as opposed to a promotion that resulted from a switch to a new workplace).
They do not hold confidential customer data like credit card info. (In fact, the companies that need to keep confidential data, like financial and health services firms, are still not embracing cloud based systems as of yet.) But for the rest of us, CRM systems are basically places that store activities, appointments, emails, notes and phone calls.