Nearly 20,000 customers of Superdrug have been leaked