Credit agency reports security breach