Is any personal data or credentials at risk during simulations?

No. Phishing simulations are designed to be safe. If a person enters information, it’s anonymised and not stored. The goal is to train, not to capture data.