1Password attackers got into internal employee system: “conducted initial reconnaissance with the intent to remain undetected for the purpose of gathering information for a more sophisticated attack.”