The attacks went undetected for just over a month, and the hackers no longer have access to the accounts