Vodafone has revealed that nearly 2,000 Vodafone customers may have had their personal details accessed by hackers.
The company said 1,827 accounts were accessed and criminals may have been able to obtain customer names, mobile phone numbers, bank sort codes and the last four digits of their bank account number.
The attack on customers’ detail occurred between midnight on Wednesday, October 28, and midday on Thursday, October 29.
A Vodafone spokesman said on Saturday theÃ‚Â incident was driven by criminals using email addresses and passwords acquired from an unknown source external to Vodafone and the company’s systems were not breached in any way.
“Whilst our security protocols were fundamentally effective, we know that 1,827 customers have had their accounts accessed, potentially giving the criminals involved the customer’s name, their mobile telephone number, their bank sort code, the last 4 digits of their bank account.
“Our investigation and mitigating actions have meant that only a handful of customers have been subject to any attempts to use this data for fraudulent activity on their Vodafone accounts.”
The mobile phone company said no credit or debit card details were accessed and the information obtained by the criminals “cannot be used directly to access customers’ bank accounts”.
The spokesman continued:
“However, this information does leave these 1,827 customers open to fraud and might also leave them open to phishing attempts.
“These customers’ accounts have been blocked and affected customers are being contacted directly to assist them with changing their account details.”
Vodafone said it launched its ownÃ‚Â investigation and had contacted banks to alert them to the breach.
The National Crime Agency, Information Commissioner’s Officer and Ofcom were informed on Friday evening.