Company notified users that 'advanced cyber actor' may have breached their devices, including Islamic State suspect under investigation by officials working with Israel's NSO Group