Data stolen from a third-party T-Mobile retailer could help back actors wreak havoc.