Partner who works for a (relatively) small UK Charity has her work details/email used as a Phishing Example for a UK bank, who also leak/invite entire org to an upcoming event