The attack affects several of its systems, including how employees track their paid time off and how they get paid, according to the company.