Legislative auditor plans follow-up investigation on data breach