An attack on the email marketing firm raises questions about the continued risk of a supply chain compromise.