A database for Sanrio, the Japanese owner of the Hello Kitty brand, was breached, putting the data of 3.3 million of its users at risk, according to security website CSOonline.com's report.