Recently, I've had a number of bad events occur. Supposedly, these things happen in threes, and I'm hoping that's how it goes. I won't share the first two event details. Needless to say they are both very upsetting and expensive events. The third event was VERY expensive. And very avoidable.
What made it particularly galling was how it happened to me, someone who is ridiculously careful online because among the roles of previous jobs I've held, one has been the management of online privacy and data. Compelling partner companies to take extra effort, steps or other precautions to protect user data and information.
If your company is like mine, you take tests each year to identify several different forms of potential identity capture. Phishing, Spearphishing, downloading Trojan horses, etc. There are many ways to do it, and I'm familiar with all of them. I've always passed these tests with flying colors, and I've even caught several transgressors over the years.
Before I tell my own, very humbling, story, let me say this kind of event is not just an issue of being online. My stepmother is not as adept online as I am, so does not engage the internet to nearly the degree I do. Yet several years ago she was scammed out of several thousand dollars in attempting to do something good for her grandchild - so she thought. Unfortunately, she (much like I am about to detail) missed one or two key details in her situation, and fell victim to a con over the phone. Anyone can be a victim.
America: 
The wonderful movie