Corporate regulator halts credit applications after cyber attack, says some credit information may have been viewed.