Using social engineering, hackers compromised employee accounts with access to personal and health information.