Twitter finally confirms that phone, e-mail data of 5.4 million users was leaked and sold