An email sent to staff said that the accounts of the three employees who were scammed were accessed using their login credentials.