Vodafone has confirmed that hackers may have accessed the bank details of nearly 2,000 of its customers.
The company, which specialises in mobile phone services, was hit by a cyber attack last week, coming as a blow to its recent roll out of home broadband.
It said 1,827 of its accounts may have been accessed, potentially giving criminals customer names, mobile phone numbers, bank sort codes and the last four digits of their bank accounts.
Vodafone has already launched an investigation and informed the National Crime Agency, regulator Ofcom and the Information Commissioner’s Office on Friday night.
A Vodafone spokesman said: “This incident was driven by criminals using email addresses and passwords acquired from an unknown source external to Vodafone. Vodafone’s systems were not compromised or breached in any way.”
“Whilst our security protocols were fundamentally effective, we know that 1,827 customers have had their accounts accessed, potentially giving the criminals involved the customer’s name, their mobile telephone number, their bank sort code, the last four digits of their bank account,” it said.
“Our investigation and mitigating actions have meant that only a handful of customers have been subject to any attempts to use this data for fraudulent activity on their Vodafone accounts.”
The company insisted that no credit or debit card details were access and the information obtained by the hackers was not enough to directly access bank accounts of customers.
But the firm said the information taken could potentially leave the customers affected vulnerable to fraudsters, adding accounts had been blocked with affected subscribers contacted directly.
The news comes on the back of a high-profile cyber-attack on TalkTalk earlier this month, which the company claimed may have seen just under 21,000 unique bank account numbers and sort codes accessed.