Company, employment, and security data may have been exposed in a possible data breach involving 48 firms participating in an accreditation program of the Department of Information and Communications Technology (DICT), the agency reported.