> We detected what we believe to be a coordinated social engineering attack by people who successfully targeted some of our employees with access to internal systems and tools.

...this could mean anything. Seems like they simply want to portray themselves as the victims, even though it's very possible one of their own employees was involved.