the breach was caused by an insider threat