Data at risk includes names, bank details and addresses of current and former force members, government sources suggest