Top open source email platform hacked to steal user details