KnowBe4, which provides security awareness training, was fooled by stolen ID.