The complaint describes several instances in which one or more unknown subjects gained unauthorized access to a U.S.-based company’s email account