T-Mobile says breach exposed personal data of 37 million customers