Canadian healthcare organization apologizes for insensitive phishing test