A testing contractor's file transfer site handed over assessment data spanning two decades after a single compromised credential sat unnoticed…