Summary: Compensation could end up being paid to thousands of asylum seekers caught up in a massive online privacy breach.