A government contractor exposed a path to immigration records, raising security concerns about sensitive data access.