California translation firm's security lapse exposes sensitive files