The cyberattack occurred in April after a hacker used social engineering to deceive an employee and gain access to the company’s IT system