Carphone Warehouse has revealed that its IT division has experienced a security breach by a sophisticated cyber attack.
The division operates the websites OneStopPhoneShop.com, e2save.com and Mobiles.co.uk and provides a number of services to iD Mobile, TalkTalk Mobile, Talk Mobile, and to some customers of Carphone Warehouse.
The firm has since taken action to secure these systems and has launched an investigation with a cyber security firm to determine what data was affected by the attack.
The investigation has found that personal data, including addresses, bank details and the date of birth of up to 2.4 million customers may have been accessed.
Credit card data of up to 90,000 customers may also have been breached due to the malware.
Sebastian James, group chief executive of Dixons Carphone, said: “We take the security of customer data extremely seriously, and we are very sorry that people have been affected by this attack on our systems. We are, of course, informing anyone that may have been affected, and have put in place additional security measures.”
Dixons Carphone also revealed that Currys, PC World and the majority of Carphone Warehouse customer data is held on separate systems, and has not been accessed.
The mobile phone retailer has also advised affected customers on how to reduce the risk of further breaches to data.