The personal data of up to 2.4m customers of Dixons Carphone may have been exposed in a cyber attack, the electrical goods and mobile phone retailer confirmed.