The cyber-attack took place after hackers compromised a third-party software provider, the Treasury said