Phishing scam hit MN agency; data of 3K possibly exposed