An IT system containing data such as surname, first name, telephone number, SIM card number, PUK code, tariff plan was accessed, the company said