The law firm behind Australia’s first privacy class action is investigating a recent breach which left the personal information of thousands of participants in the National Disability Insurance Scheme exposed.