The Connecticut Department of Children and Families said a phishing attack on May 20 resulted in the download of emails from two DCF employee accounts.