Says it 'strongly' suspects attack limited to legacy system, and that nothing sensitive is at risk