Data set containing 13,000 customer files was incorrectly uploaded to a third-party service provider.