The attack, which involved the DoppelPaymer malware, came a few months after an audit of the office revealed weak cybersecurity practices.