Canadian healthcare staff decry ‘cruel hoax’ after scam email promises paid day off
Canadian healthcare staff decry ‘cruel hoax’ after scam email promises paid day off
www.theguardian.com
‘Cruel hoax’: Canadian healthcare staff decry employer’s email promising fake day off
Unions condemn ‘insensitive’ internal cybersecurity test sent to healthcare workers in Newfoundland and Labrador

I don't think that the cybersecurity team did anything wrong. If they can be exploited that way then it is a measurable risk.