Leaked documents suggest safety violations as German car-maker points to data breach at US third-party provider.