Sophos says one of its employees got phished in March but the breach was limited and contained

https://news.sophos.com/en-us/2025/09/22/what-happens-when-a-cybersecurity-company-gets-phished/