Nansen third-party vendor suffers security breach, affects user data