Target confirms PIN data was stolen in breach