NYC housing lottery applicants' personal info exposed online in data breach