A Midlands education authority was caught for at least €50,000 by a phishing scam which is still under Garda investigation two years later.