
A T-Mobile employee sold the customer records, including details of when contracts expired, the Information Commissioner's Office (ICO) said. Rival networks and mobile phone retailers then tried to lure away T-Mobile customers by cold calling.
Information commissioner Christopher Graham said his office was preparing a prosecution.
T-Mobile said it was ‘surprised' the breach was made public.
The ICO is pushing for breaches of data protection law to be punishable with jail sentences.