A large number of Americans' metadata has been stolen in the sweeping cyber-espionage campaign carried out by a Chinese hacking group dubbed "Salt Typhoon," a senior US official says.