The hacks occurred ⁠in May during a cybersecurity test conducted by Irregular, an independent company that conducts cybersecurity evaluations