The group infiltrated more than 2,000 BT customer accounts and used the details to buy luxury goods.