T-Mobile hack confirmed, carrier says 47.8M records taken; not just customers