Thousands affected in ActewAGL and Icon Water mail-out privacy breach