Intruders identified and exploited a vulnerability in Paytimes client service center , which allowed them to access employee information . A subsequent investigation by third - party forensic IT experts found that the intruders which the statement described as skilled hackers working from foreign IP addresses first gained access to the companys client service center on April 7 . ;