The hackers 'had access to certain customer data such as names, addresses, email addresses and telephone numbers, but not bank details', a spokesman says.