Customers are told “unauthorised access” has led to their encrypted data being compromised.