Recent data leaks at Cashea and Yummy, two leading tech players, signal a deeper vulnerability in an industry ripe for transformation