More than three million customers and 1,000 employees had personal data accessed by hackers

Information Commissioners Office rules incident last October, which saw the personal details of more than 150,000 customers accessed, could have been stopped