Billing records, datasets and partial model weights were exposed after attackers reached development systems through a hosting partner.