Insurance giant says most US customer data stolen in cyber-attack