A major supplier of enterprise software has disclosed a long-term security breach, leaving the public and private sectors scrambling to respond.