Supermarket giant admits 2.2 million people could be hit by worrying data breach – what to do if you’re affected