This is the exact same phishing attack that i see on many retail stores that i consult, and i have yet to see any of them fall for it. Smaller surface, sure, but even people loosely familiar with computers are skeptical of those emails/SMSs
I'm a former Twilio employee, and even I've been getting slammed by these phishing attempts over the past couple months. Remember that this is a company of more than 8,000 people: it only takes one person to let down their guard. Maybe they're tired, maybe it's been a long day, maybe they're just the weakest link.
Is your company's information that interesting? We had to prepare for an audit, and concluded that our info is simply not worth the effort. People get training in noticing phishing emails, but the only one we've ever had was a cheap shot at getting someone to transfer money. We may have been wrong though, and overlooked something.