Oregon DEQ data breach leaked thousands of people’s information, but the agency hasn’t told the public