The department notified lawmakers of the breach, which it said was linked to a state-sponsored actor in China.