Over one million Orange customers face an increased risk of phishing attacks after hackers broke into a marketing platform.