A security breach that left 24 million mortgage documents unprotected on a server is rekindling concerns about the risks posed by fourth parties.