US insurance rulemaker suspends investment risk designations after cyber attack