A storage drive containing the personal information of 5,500 State Street employees and 40,000 customers was stolen while in possession of a data analysis firm.