major security lapse