The probe follows investigative reporting that traced the security breach to New Orleans-based IDScan.net