Customs and Border Protection on Monday said a subcontractor was the target of a “malicious cyberattack” that compromised a database of “travelers and vehicles” that crossed the southern U.S.