Warner Music discloses months-long web skimming incident