rsa-How to solve the information leakage of database?

rsaphp Encrypted Database Hacker

The database of our website has a large number of customer's mobile phone number, the customer in the morning on our website registered members, in the evening there are other peers to call him (currently excluding illegal internal personnel leakage).
Then I made a variety of encryption of the mobile phone number (transport layer RSA encryption, database Xxtea encryption, the site before and after the station does not display clear text mobile phone number)
Even if the hacker got the background permission or access to the database, then he saw only the ciphertext AH ~ ~

What other questions should I pay attention to?

