Telstra, Optus and Vodafone may be forced to order the recall of potentially millions of mobile phone SIM cards after it was revealed that US and British spy agencies stole encryption keys that secured personal information, including calls and texts, on the chips.

Australia's three major telcos confirmed to Fairfax Media on Monday they each sold SIM cards produced by the hacked Dutch company Gemalto, as well as SIMs manufactured by other companies.

'There are … 3 major telecom numbers details I can provide you. Telstra, Vodafone and Optus'. Credit:Penny Stephens

None was forthcoming on whether or not they would issue replacement SIMs to customers in the event of them being affected by the hack, pending further advice from Gemalto and authorities as they carried out their investigations.

Telstra, Australia's largest telco provider, said it was "in contact" with Gemalto and would work with the company to address any issues identified.