Regulator warns firms to investigate Capita data breach