If the board was hacked I would think everyone would have received the email, otherwise what was the point of the hack since the only thing of value would be the privately stored emails of members?
Which reminds me that medical offices have become huge recent targets for ransomware attacks. I work as an attorney and handle many personal injury cases, and just in the past year, settlement in a couple of my cases was held up due to such attacks. I could not get current bills on my clients because the hackers locked the billing system. In one of my cases it took MONTHS for them to figure it out, thus holding up settlement for my clients, much to their annoyance. I suspect those medical offices did not invest much, if anything in their internet security. I do not know if any money or ransom was paid. One of the offices admitted to me it was a ransomware attack but would not say if the ransom got paid.
I should note that my firm and other law firms have been subject to attempted hacks. Any firm that handles real estate and large amounts of clients' or lenders' money are targets. You should all ask your law firms what they have done as a firm policy to protect against such attacks.
We all need to be vigilant with our internet security at work and with our personal security.