A hacker might call an employee and convince them to reveal sensitive information. For example, a hacker asks an employee to enter data the hacker knows will not work. The hacker then simply asks for the employee's ID and password.