CeX, a second-hand gaming and gadget retailer based in the UK, has suffered a data breach in its online store. The personal information of up to 2 million customers was stolen, including names, addresses, email addresses, and phone numbers.

Some financial information, which included expired debit and credit cards, was also taken. However, the company stopped storing credit card information with its online store in 2009.

CeX is now in the process of working with police and notifying customers.

Read the full story here.