The firm pinned the blame on a third-party vendor who was contracted to set up the site on Microsoft Azure.