Security researcher Brian Krebs disclosed a data breach on a page of the identity-theft protection company's website.