New OIS report released on security breach