The password manager says customers began receiving phishing emails on Jan. 19.