One compromised analytics vendor gave hackers a passport to dozens of major customer environments.