No problem! This is an issue everywhere. 90% of breaches in businesses are due to social engineering like you encountered here. Humans are usually the weakest link when it comes to security.

At my organization, we have over 100k employees, and trying to teach all of them how to not get phished by emails or other means is quite a huge deal with no real full proof answer. Can't require classes for 100k people. Not quite sure what the real answer is.....