metro security breach