The second breach in less than 24 months stemmed from employee account compromises.
Source: Threadpost