Signal says attackers may have accessed phone numbers of 1,900 users in Twilio breach