Sophos breach: Customer data exposed due to permission access flaw