Private equity group launched probe that determined names, home addresses and social security numbers had been stolen in cyber attack last month