A major data breach at a third-party IT service provider has exposed personal information belonging to customers of the Lidl supermarket chain in several European countries.