Grubhub confirms data breach, both drivers and customers are affected