A threat actor compromised the British Post Office and local government networks, stealing personal data—including email addresses and mobile phone numbers—of thousands of employees.