The Australian Centre for the Moving Image is the second Melbourne arts institution to be involved in a data breach in less than a week.