CISA confirms hackers may have accessed data from chemical facilities during January incident