WA local gov entity lost $350,000 in phishing attack