The incident was caused by a social engineering attack targeting an employee device.