Hackers apparently used doctored invoices purporting to be from vendors to steal money from party coffers.