Data breach at Bonobos hits 7M customers

....Seventy gigabytes' worth of customer data stolen from the website of U.S. men's clothing retailer Bonobos has been posted in a hacker forum, reports Bleeping Computer....

....Bonobos confirmed to Bleeping Computer that the data was genuine, but said it had been taken from a cloud backup hosted by a third-party service and not directly from Bonobos' own network...

A lot of these breaches seem to come from 3rd party companies/service providers. Does it mean these companies are not vetted enough, do not bear any consequences if a breach occurs at their site, a combination of these and more?