The company has launched an investigation into the incident and is notifying all affected clients – but it won’t say how many have been affected or how much money is at stake.