The extent of a security breach at the online hotel booking operator that manages SuperValu’s getaway breaks is greater than first believed, placing the credit and debit card details of up to 62,500 customers at risk.