It has said that knowledge from as many as 87 million users, largely in the United States, could have been improperly shared