Vanguard Trust uses the FAIR (Factor Analysis of Information Risk) model to quantify cyber risk. They estimate 60 phishing campaigns per year targeting employees, with a 5% vulnerability rate. Average loss per successful breach is $3 million. What is the expected annual cyber loss from phishing under this model?