Dixons Carphone Plc (LON:DC) said on Tuesday that about 10mln records containing personal data of customers may have been obtained in a cyber-attack in 2017, much higher than its earlier estimates.
The electricals and mobile phone retailer, which has become the victim of a major cyber-attack for the second time in three years, said the hack investigation is nearly complete and there is now evidence that some of the data may have left its systems.
READ: Dixons Carphone shares rally as slump in annual profits as expected, turnaround to take time
However, Dixons Carphone said the customer records do not contain payment card or bank account details and there is no evidence that any fraud has resulted from the incident.
In June, the company said an investigation revealed there was an attempt, going back to July last year, to compromise data on 5.9mln credit cards in one of the processing systems of Currys PC World and Dixons Travel stores.
Last month, Britain's National Crime Agency said it was heading a criminal investigation into the hack, working with the National Cyber Security Centre, the Financial Conduct Authority and Britain's data protection regulator.