There's a big lesson in this
And it is that it doesn't matter who you are or how much you know, its still painfully easy to get caught out by the criminals because we have built an infrastructure that's fundamentally insecure.
And this is why everyone who bleats about end users being the problem because they won't adopt super unique passwords, or whatever other precautions is themselves part of the problem. We have to get to an IT infrastructure where its easier to do it the right secure way than it is to do things the wrong way. The trouble is a lot of sacred cows will have to go by the wayside for that to happen.