The companies confirmed that employee data was stolen through a third party after a hacker leaked information purportedly stolen from 25 entities.