Parent company TFG London has apologised to customers but says there is no reason to believe payment information is at risk.