This can be properly understood as a spearphishing attack. You would handle it in the exact same way: security awareness training to minimize data leakage, even

This can be properly understood as a spearphishing attack. You would handle it in the exact same way: security awareness training to minimize data leakage, even if, in this case, the data in question isn't financial (for example) but personally and professionally damaging.