In February 2019, UK-based Crew and Concierge Ltd., a shipping company specializing in the yacht industry, suffered a significant data breach exploited through COVID-19-related phishing scams targeting remote employees. Hackers gained unauthorized access to a company server containing over 90,000 files, which was unprotected by a password, exposing it to public access. The breach compromised personal data of more than 17,000 individuals globally, including employees and associates in the yacht sector. The incident highlighted severe security negligence, particularly in remote work policies, leaving sensitive information vulnerable. The company now faces potential regulatory fines and reputational damage due to the failure to implement basic cybersecurity measures, such as password protection and phishing awareness training. The exposed data could lead to identity theft, financial fraud, or further targeted attacks against affected individuals, amplifying the breach’s long-term consequences for both the company and its workforce.