Energy giant confirms breach of customer project files