Cyber-attacks and data breaches are of great concern for data-sensitive organizations. These organizations are adept at safeguarding data but fail in safeguarding against cyber-attacks. Phishing is a semantic attack that deceives email users into clicking on the embedded link or attachment in an email. The goal could be to induce the email users to subsequently give away sensitive information, enable malware that can steal passwords, or install a backdoor into the user’s system and encrypt the users’ data. Phishing imposes a great risk on these organizations for two reasons. First, even a non-vital position in which employees likely perceive little cyber risk, if being attacked, could cause significant economic loss and litigations. Second, phishing emails could simultaneously reach most employees within an organization. Thus, strengthening the frontier of safeguarding against phishing is of vital importance.