The company shut down the attack, which masked itself as a Google Doc invitation, within an hour.
Source: CNet