In an official statement, the bank clarified that the breach involved a single employee's email account rather than its main banking infrastructure.