Fox: HR firm confirms 4M records exposed in major hack