Official: Puerto Rico govt loses $2.6M in phishing scam