The Royal Borough of Kensington and Chelsea said it is ‘too early’ to determine whether any data has been compromised