"They got someone's password, and sent an email to our CFO, who sent the $40,000 wire transfer."