The data breach began with a compromised employee email account. Source