Verizon customer data — including phone numbers and PINs — exposed by vendor