Industry superannuation fund Spirit Super disclosed an extensive security leak after an administrative email account fell victim to a phishing attack. The compromise exposed the master identity and balance updates of 50,000 superannuation members.