Signal confirms third-party breach exposed almost 2,000 numbers