The investigation is ongoing, and the city will contact those who may have potentially been affected by the breach, it said.