Major US shipping platform left customer data wide open to hackers