The U.K. Top 50 firm said that the incident “has been confined to a very small part of its data store”