Fraudsters had access to the personal details of 30,000 Barclays customers for up to seven years, it has been revealed.