Company says it is unable to identify specific individuals affected by one of the largest breaches in Australian history