Thousands of businesses seeking disaster loans told of data leak