The Crypto.com breach was a limited, contained incident that exposed a small amount of PII after a phishing-led intrusion tied to the Scattered Spider group; investigations found no customer funds