breach which affected million