Confusing data breach in Rhode Island leads to AG investigation