Ledger has since attributed the exploit to a phishing attack on a former employee.

Read more at cointelegraph.com