About once every two years I fall for a phishing attempt. It is usually when several months have ellapsed without any phishing, and for whatever reason I'm just caught in a wrong frame of mind. Sucks to have to go around changing your password, particularly if you have one that you like.