A reported data breach involving Polymarket is raising fresh concerns about the hidden attack surface.