How many users did Sony say might have been affected by the intrusion?