Phishing attack puts protected data at risk for 128,400