Cathay Pacific data breach hits 9.4 million people