Consequences of phishing attacks

Here's another sobering story about the consequences of clicking on a link and not really knowing what it is.
Update: seems this affects windows users too. Advice is the same!

https://healthitsecurity.com/news/350000-patients-2m-emails-exposed-in-oregon-dhs-phishing-attack

350,000 Patients, 2M Emails Exposed in Oregon DHS Phishing Attack

Nine employees of the Oregon Department of Human Services fell victim to a targeted phishing attack, breaching a trove of personal and medical data in 2 million compromised emails.