Five year-long breach disclosed by largest mobile SMS routing firm