ATO admits SAN outage made it less secure