A vendor breach left 5.8 million people exposed, raising fresh questions about how companies handle third-party access to ...