Hackers have gained access to a Vodafone Germany server and stolen the personal data - including bank account information - of two million customers.
In a statement, the telco says that the attacker managed to get hold of bank account numbers and sort codes, as well as names, addresses, dates of birth, gender information. Credit card numbers and PINs were not compromised.
Vodafone insists that it is "hardly possible to directly access the stolen data to the bank accounts" but tells affected customers to be vigilant about potential phishing e-mails designed to obtain additional information which could be used with the stolen data.
The attack was carried out with "high criminal energy" and "insider knowledge", says the statement, but was stopped as soon as it was discovered. Vodafone then called in in the German authorities and is now writing to all compromised customers.