EasyJet says 9 million travel records taken in data breach