Financial security agency hit by data breach