cbse data breach clarification