Origin Energy has confirmed a data security incident that could affect more than 2 million users