Stolen contact records can enable convincing phishing attacks. Lucy Powell had been the UK's Education Secretary for less than a week when the Department for Education (DfE) disclosed a cyberattack affecting its online customer help desk and the Turing Scheme portal. Hackers are reported to have stolen around 607,000 records containing professional contact details, including names, email addresses, phone numbers and job titles. Those assessments are significant, but they do not eliminate the possibility of targeted social engineering using authentic professional contact information. Requests involving payments or account changes should always be confirmed using independently sourced contact details rather than information contained in the message itself.