security firm hacking incident