Cathay apologises over data breach but denies cover-up