The Great Starbucks Gift Card Incident of 2025 (And Why Your Holiday Inbox is a Minefield)
Picture this: Thanksgiving week at an accounting firm. Everyone’s wrapping up projects before the holiday, planning their Black Friday strategy, when suddenly—Christmas came early! A $25 Starbucks gift card lands in everyone’s inbox. “How thoughtful!” they all said. “The firm really gets us!”
Spoiler alert: The firm didn’t send it. It was part of our monthly employee phishing campaign tests.
A quarter of the team had already clicked that link, ready to fuel their pumpkin spice addiction, before someone asked the fateful question: “Hey, did anyone else’s card not work?”
Welcome to our very own holiday phishing attempt. Nothing happened (other than those who clicked the link got signed up for extra cyber security training), but watching some smart minds fall for a fake latte was… educational (and mildly entertaining).
Why the Holidays Are Hacker Christmas
Here’s the thing—that fake gift card didn’t work because we’re gullible (we do cyber security training for all staff, through out the year). It worked because it was PERFECTLY timed. During the holidays, our defenses are down and our expectations are […]




