Hackers hit a benefits provider, an anime streaming service, and a crime tip platform—exposing millions of sensitive records.