Label maker Avery says ransomware investigation also found credit-card scraper