Snapchat issued a mea culpa to its employees over the weekend after revealing that one of its staffers fell for a phishing scam and "revealed some payroll information" to online miscreants.
"The good news is that our servers were not breached, and our users' data was totally unaffected by this," Snapchat wrote in a blog post. "The bad news is that a number of our employees have now had their identity compromised. And for that, we're just impossibly sorry."
The company's payroll department was targeted by the "isolated email phishing scam" last Friday. The scammer impersonated Snapchat CEO Evan Spiegel, and asked for employee payroll information.
"Unfortunately, the phishing email wasn't recognized for what it was — a scam — and payroll information about some current and former employees was disclosed externally," the company wrote.
Within four hours of the incident, the company confirmed it was a phishing attack and reported it to the FBI. Snapchat has since contacted all affected employees and offered them two years of free identity theft insurance and monitoring.
"When something like this happens, all you can do is own up to your mistake, take care of the people affected, and learn from what went wrong," the company wrote. "To make good on that last point, we will redouble our already rigorous training programs around privacy and security in the coming weeks."
Meanwhile, this has been a busy month for Snapchat. The self-destructing messaging app recently rolled out a "birthday party" update for iOS and Android offering "some fun surprises, like an exclusive lens on your birthday, a cake emoji next to your name, and more." Snapchat also introduced on-demand geofilters, letting you "create and publish a geofilter for your party, wedding, business, or any other place or event" starting at $5 each.
This article originally appeared on PCMag.com.