Two US banks are alerting tens of thousands of customers after hackers breached the systems of a third-party vendor.