The SANS Institute is one of the largest organizations that offer information security training and security certification to users worldwide.
In a notification posted recently on their site, the organization states that a phishing attack that target an employee allowed a threat actor to gain access to their email account.
Article Link: https://www.andreafortuna.org/2020/08/17/sans-institute-how-to-turn-a-data-breach-into-an-educational-opportunity/