The attack targeted Kronos, a payroll program that tracks time and attendance data