The breach is “a big black eye” for the Chinese security apparatus, one expert says, exposing the risk of the state’s vast effort to amass citizens’ personal data.