The MailerLite email marketing service says an employee was phished and allowed internal access to its systems.