The United States Securities and Exchange Commission blamed a SIM swap attack for the breach of its official X account, alluding that the hacker had hijacked a staffer’s phone.