Nevertheless, TalkTalk said that just under 1.2 million customer email addresses, names and phone numbers were accessed.
It also said that under 15,000 customers dates of birth were accessesd, just under 21,000 unique bank account numbers and sort codes; and under 28,000 obscured credit and debit card details.
It said that the credit and debit card details can’t be used for financial transactions.
It said the Metropololitan Police investigation continues – today another youth, in London, is being questioned in connection with the attack.
Dido Harding, TalkTalk’s CEO said her company had decided to be as open, honest and transparent as it could be.