Signs display the logo of Dixons Carphone at the company headquarters in London, Britain August 1, 2017. REUTERS/Neil Hall
Signs display the logo of Dixons Carphone at the company headquarters in London, Britain August 1, 2017. REUTERS/Neil Hall

Bengaluru — About 10-million Dixons Carphone records containing personal data may have been accessed in a 2017 cyber attack, the British electronics and mobile phone retailer says, boosting an earlier estimate of 1.2-million.

It was the second major cyber attack in three years on the company, which has about 22-million customers in the UK and Ireland. It apologised to customers on Tuesday and said an investigation into the hacks was nearly complete.

"Again, we’re disappointed in having fallen short here, and very sorry for any distress we’ve caused our customers," CEO Alex Baldock said.

Dixons said the accessed customer records did not contain payment card or bank account details and there was no evidence that any fraud had resulted from the incident.

"Unfortunately, given the accuracy of their previous statements, tomorrow may be a different story," said Andy Norton, director of threat intelligence at cyber security firm Lastline.

Dixons said it had closed off the unauthorised access, and added security measures.

In June, the company found that 1.2-million records containing nonfinancial personal data, such as names, addresses or e-mail addresses, had been accessed. It said then that an investigation had revealed there was an attempt, going back to July 2017, to compromise data on 5.9-million credit cards in one of the processing systems of its Currys PC World and Dixons Travel stores. In June, Britain’s National Crime Agency said it was heading a criminal investigation into the hack, working with the National Cyber Security Centre, the Financial Conduct Authority and Britain’s data protection regulator, the Information Commissioner’s Office.

"Our investigation into the incident is ongoing. and we will take time to assess this new information.We would expect the company to alert all those affected in the UK as soon as possible and to take all steps necessary to reduce any potential harm to consumers." the Information Commissioner’s Office said.

Dixons shares were up 0.6% at 1221 GMT, in line with a FTSE 100 index up 0.64%.

Reuters