Customer data from baby superstore Kiddicare has been accessed by hackers, the retail chain said.
A small number of customers received a "possible phishing communication" in the form of a text message from a website claiming to be a subsidiary of Kiddicare.com. It invited recipients to take part in a survey.
The company believes data from a test site, which has now been deleted, was accessed.
Customers' names, delivery addresses, emails and phone numbers were exposed in the hack, but the company said no payment details were accessed.
Credit and debit card information is not stored by the company on its systems, the chain said.
Increased security measures are now in place.
There was no indication that passwords were accessed but the site has automatically reset all passwords as a precaution, Kiddicare added.
On the company's website, Kiddicare said the risk to customers was "low" but warned them to be vigilant.
"The personal information exposed has limited use and therefore the risk to you is low.
"However any personal information can be used in phishing attacks and scams and so you should be extra vigilant and be alert to any suspicious communication.
"If you are unsure whether a communication is genuine, you should always contact the company the message is purporting to be from to confirm authenticity."