CVS investigating data breach at online photo service