A software bug at a widely used internet-service provider leaked sensitive data for months, potentially creating security headaches for thousands of its corporate customers.