supplier data breach transparency