A US fintech firm with thousands of car dealership clients has revealed a data breach impacting 5.8 million end customers.