McGraw-Hill confirms data breach following extortion threat