UK’s state investments agency hit by data breach