A sprawling cyberattack on a Michigan fintech giant compromised Social Security numbers and personal data of 5.6 million Americans-here’s how it happened and what’s at stake.