It’s ok, this wasn’t a real attack, but if it was, you could have been asked to provide sensitive information without knowing you were being hacked.