Non-bank lender Latitude says a “sophisticated, well-organised and malicious cyberattack” remains active inside its systems, and it is not taking on any new customers after being forced to isolate some of its technology platforms.

Latitude also revealed on Monday that more customers – including past customers and applicants for credit – could fall victim to the attack, after it said last week about 330,000 customers had had their personal identification stolen.