The eight-page report said hackers were able to obtain access to the data by exploiting vulnerability in the MOVEit file transfer program