Companies are responsible for data breaches at their third-party contractors

From the articleTrezor Data Breach Worse Than Initially ReportedAlso in Trezor says ShipMonk breach affected another 67,000 customers, Trezor says 67,000 more US customers affected by ShipMonk data breach, Trezor says mailing breach leaked 67K more users than first thought, Trezor data breach expands to 80,700 after ShipMonk leak