Government initiates criminal investigation into data breach