sandbox breaches