Timehop’s data breach included more personal user information than originally announced