Quickly halted, the attack was discovered after a series of false e-mails purporting to come from the PSA had been issued.
The evidence is that the attack was confined to forwarding new phishing e-mails.
No indications have been found that other information has been sent out.