My first thought would be that they've been hacked (or something else, like a CRM attached to their systems, has).