Cylance clarifies data breach details, except where the data came from