The Sega breach is part of a much larger supply chain attack that struck a digital marketing company called Arara.