London Hydro says names, addresses, account details may have been exposed, but much about the intrusion is unknown