A configuration issue is causing Salesforce Community sites, including those of banks and healthcare companies, to leak data.