Up to nine million customers at risk after Three Mobile data breach

A security breach at Three Mobile has put the personal data of many of its nine million customers at risk.

Thieves infiltrated a customer upgrade system using a staff login to order and intercept hundreds of new handsets. The breach meant they had access to personal data including names, phone numbers, addresses and dates of birth of customers but not financial information.  More than 400 phones had been stolen but insisted customers bank details were never at risk.

Three’s database is thought to have been accessed using a log-in supplied by an insider to access details of customers who were due upgrades.  Expensive phones were then ordered and either intercepted or stolen from designated stores.

The National Crime Agency said last night that a man, 48, of Orpington, South East London, and a man, 39, of Ashton-under-Lyne, Greater Manchester, had been arrested on suspicion of computer misuse.

Another man, 35, from Moston, Greater Manchester, was also arrested on suspicion of attempting to pervert the course of justice.

All three have since been released on bail pending further enquiries.