UPS discloses data breach after exposed customer info used in SMS phishing