Major breach found in biometrics system used by banks, UK police and defence firms