EU drugs regulator confirms data breach in cyber attack