Workday says hackers used social engineering to access personal data during a breach

Workday says a third-party CRM was breached. Threat actors posed as IT or HR in order to trick employees into sharing information. Company says no indication of any access to customer accounts.