Fears customer data could have been stolen in Kathmandu data breach