At issue: A phishing attack gets through to 900 users on a single email distribution list. Action plan: Find out how many email distribution lists are externally available. What, for example, could ...