Organizations pour money and time into technical and automated solutions to enhance their cybersecurity, yet those efforts often fail because those solutions fail to address the human factors that make cybercrime so successful. It is time to take this personally as cybercriminals are not attacking systems, email, or computers. Cybercriminals attack people. Traditional training and best practices can only go so far and don’t mentally prepare your team for the "in the moment” actions and decisions that protect your data. Understanding the social engineering behind phishing and adopting mindfulness practices that change behavior can drastically reduce the susceptibility of your team to cybercrime.