State Street Breech Highlights Encryption Limits, Vendor Due Diligence