Reports suggest that the hack stemmed from a Phishing scam and that the company had no intention of notifying their employees