Somewhere I worked the CEOs email got hacked and they asked the head of finance to change the bank account details for a 100k payment that was due to go out.

Luckily they thought to double check with them. But it came really close to happening.

This all happened via a phishing email.

Social engineering is how most hacks happen. Doesn’t matter what protection you put in place. People are always the weakest link.