State agency warns of security breach