He was speaking in the Commons after Liberal Democrat MP Tom Brake introduced a bill under the ten minute rule motion to extend the scope of the FOI Act to cover more firms with an element of public ownership.
By April 25, forensic teams were able to confirm the scope of the personal data they believed had been taken, and could not rule out whether credit card information had been accessed.