Japanese company NEC confirms 2016 security breach