Data broker Gravy Analytics that collects location data and sells it to the US government has been breached.