The Long Island-based lender is one of five nonbanks since January to have disclosed a prior hack, with the extent of those incidents remaining unknown.