Cyber incident involved ‘unauthorized access to certain applications through an employee account’