Four million customers of broadband provider at risk after it was hit by second major cyber attack within the last year