The primary goal of a phishing attack is to trick individuals or organizations into revealing sensitive information, such as passwords, credit card numbers, or personal identification information (PII), to cybercriminals.