Victoria has ordered an investigation into a potential data breach. Here’s what happened