One Caledonian government agency reported a breach, thanks to a third party that may have serviced other agencies as well.