The state's chief IT security officer, Vincent Hoang, said both times alarms went off immediately and they were able to limit the damage to just the affected employees' inboxes. Hoang said they believe the two cases are connected and the emails come from the same source.