A healthcare organization experienced a near-security incident when nurses, after receiving cybersecurity awareness training, reacted with heightened suspicion to a legitimate HR survey email. The nurses, now vigilant about phishing risks, flooded the security team with verification requests instead of ignoring the email. While no actual breach or data compromise occurred, the incident revealed a cultural shift where frontline staff—previously passive—became proactive in identifying potential threats. The disruption from hundreds of verification calls/emails temporarily overwhelmed the security team, but it demonstrated the training’s success in embedding cybersecurity as a shared responsibility.The scenario highlights how human behavior, when properly trained, can act as both a defense and a potential operational disruption (e.g., false positives). Though no malicious attack took place, the organization’s workflow was impacted by the sudden surge in security-related inquiries, underscoring the balance between awareness and operational efficiency. The case serves as a model for how role-specific training (e.g., tying cybersecurity to patient safety for nurses) can transform security culture, even if it introduces short-term friction.