U.S. Customs and Border Protection says photos of travelers were taken in a data breach