Oregon’s environmental agency won’t say if a group of hackers stole data in a cyberattack that was first announced earlier this month