Spokesman Alexander Leinhos says an unidentified IT systems administrator who worked for a company contracted by Vodafone conducted the attack.
Vodafone said in a statement today that the stolen data included customers' names, addresses, date of birth and bank details. Credit card information and passwords weren't stolen.
Vodafone said it regretted the incident and warned its customers to be on guard against unsolicited phone calls or emails from people seeking to exploit the stolen data.
The company has more than 32 million cellphone customers and more than 3 million broadband subscribers in Germany. It is a wholly owned subsidiary of Vodafone Group Plc.
Photos: Salman Khan returns from Jodhpur to Mumbai
Pics: Sidharth Shukla-Rashami Desai's sizzling chemistry at TV show launch
Ooh La Lana! WWE Diva flaunts sexy curves in these 30 pictures
15 'peach' perfect photos of Priyanka Chopra at People's Choice Awards 2017
62 going on 16: These photos of Rekha prove she is 'forever young'