T-Mobile confirms SIM swapping attacks led to breach