DEO confirms ‘security incident,’ those affected have been notified