I work in a public school. The older teachers are the ones that don’t even look at the sender address. “Oh, this email that sort of looks like its from an employee says to blindly open this file that I would realize is clearly fake if I took more than two seconds to look at it? I’m on it!”
Our union negotiator didn’t understand different sheets in Excel files. Had a document he wanted to share out on sheet one. For some reason on sheet two he had every union employee’s name, birth date, social security number, address, etc. in plain text. Emailed to the entire school district. I caught it immediately and made them aware. The frantic emails to my friend the IT guy were hilarious. “I NEED YOU TO GO INTO EVERYONE’S EMAIL AND DELETE THE MESSAGE I JUST SENT.” Then when it was explained that you can’t just take it back, another frantic district email “DO NOT OPEN MY PREVIOUS EMAIL. JUST DELETE.” Again, not understanding that unless they empty their trash, its still recoverable for 30 days.
As a teacher, just a letter or card saying how they impacted you is enough.