I guess at this point, we just have to assume that this will happen to pretty much any business/org

https://decrypt.co/107236/swan-bitcoin-discloses-data-leak-due-phishing-attack-newsletter-provider