A digital payments pioneer was fined by US regulators for data security flaws