Security lapse exposed New York airport servers for a year