The Sandbox explained that an unauthorized third party accessed an employee's computer and sent a fraudulent email to some users.