Exclusive: The company’s co-founder and CTO blame a former employee for a breach, but cannot rule out that it wasn’t.