Carphone Warehouse says the personal details of up to 2.4 million customers may have been accessed after a cyber-attack.
The mobile phone retailer says the data may include names, addresses, dates of birth and bank details.
Encrypted credit card information of up to 90,000 customers may also have been accessed.