FTC orders communication company to disclose data breaches