The company said customer usernames, passwords and addresses had potentially been accessed by a third party.
The data breach exposed accounts on the company's old UK website, which was replaced in September 2017.
The company told the BBC it was taking the breach "extremely seriously" and had reported it to the information commissioner.
Cash Converters lets people trade in items such as jewellery and electronics for cash, and then sells the items on to others.
