The lender is investigating a potential breach of "limited data" pertaining to its vehicle-loan customers. The data was hosted on a third-party software platform operated by Salesforce.