Startup security breach exposes internal fraud risks.