canonical security breach