Not my oh shit moment but certainly someone’s. Working in a call centre they sent out an example of a fraud email that was being sent out with our logo. It asked for all your personal information and credit card information.

Several individuals replied with all their details filled in. 3 of them replied all (entire call centre) with their details filled in.