No, not really.
But this is a rather personal case study, because I received multiple email messages designed to look as if I had been. And all of them were criminal extortion attempts.
How can I protect access to my confidential accounts?
Lessons learned from a private medical clinic that was audited by OIPC following a privacy complaint.