Solara Medical Supplies' $9.76 million settlement was due to a phishing-related breach affecting 114,000 patient records.

The median time for users to fall for phishing emails is less than 60 seconds.

For large organisations, the average Phish Prone Percentage (PPP) after one year of sustained training dropped to 4.9%.

More than 20% of users identified and reported phishing per engagement, including 11% of the users who did click the email.

After 90 days of training and simulated phishing tests, the Phish Prone Percentages (PPPs) for the education sector reduced to 19%, 19.4%, and 18% respectively for small, medium, and large organisations.

After one year or more of sustained training, the average Phish Prone Percentage (PPP) for small institutions dropped dramatically to 3.9%.

For medium sized organisations, the average Phish Prone Percentage PPP after one year of sustained training dropped to 5.2%.

KnowBe4's 2024 Phishing by Industry Benchmarking Report found that in the education sector specifically, the baseline PPP (Phish Prone Percentage) for small organisations (1-249 employees) was 33.4%.

HTML attachments make up 82% of malicious email attachments in the education sector

The median time to click on a malicious link after the email is opened is 21 seconds.

It takes only another 28 seconds to enter the data after clicking a malicious link.

For education institutions with 250-999 employees, the baseline Phish Prone Perecentage (PPP) was 31.2%.

For large educational institutions with more than 1,000 employees the baseline Phish Prone Percentage (PPP) was 31.7%.

42% of organisations reported phishing and social engineering attacks in 2024.

84% of attacks against energy and utilities sector originated from phishing.