Sony confirms PSN user data has been stolen