Dominic Cummings said he and ex-PM Boris Johnson were notified of the 'serious' breach - involving 'extremely dangerous' information - in 2020.