data security controversy