Roll20 says the data breach was due to a “bad actor” who gained access to an account on the company’s administrative website for one hour.