Officials say hack may have been 'invited' by an employee