Security breach at Web host leaves sites at risk