Comment by neximo64

> We had no idea about any phishing attack. We never engaged in such activities, and if our server was compromised, it was their responsibility to prevent it.

It's also your server it also had your responsibility to ensure that it was protected. Likely it was hacked