The news that a Verizon Communications Inc. vendor exposed millions of customer records has highlighted the serious risks related to trusting third-party vendors with company data.

When there’s a breach or data is exposed, no matter where it originates, the responsibility often comes back to the company, said current and former in-house counsel, so legal departments must ensure that they conduct proper third-party vendor due diligence.