The breach will likely present a major task for Congress’ IT departments, which must now determine what’s been stolen and which security risks could still pose a threat to the Capitol’s network.