Carphone Warehouse has revealed that personal information on up to 2.4m customers may have been accessed by “a sophisticated cyber-attack”.