Attackers gained access to private account details through an email compromise incident that occurred in April.
Source: Threadpost