Solara Medical Supplies' $9.76 million settlement was due to a phishing-related breach affecting 114,000 patient records.

For large educational institutions with more than 1,000 employees the baseline Phish Prone Percentage (PPP) was 31.7%.

More than 20% of users identified and reported phishing per engagement, including 11% of the users who did click the email.

After 90 days of training and simulated phishing tests, the Phish Prone Percentages (PPPs) for the education sector reduced to 19%, 19.4%, and 18% respectively for small, medium, and large organisations.

After one year or more of sustained training, the average Phish Prone Percentage (PPP) for small institutions dropped dramatically to 3.9%.

For medium sized organisations, the average Phish Prone Percentage PPP after one year of sustained training dropped to 5.2%.

KnowBe4's 2024 Phishing by Industry Benchmarking Report found that in the education sector specifically, the baseline PPP (Phish Prone Percentage) for small organisations (1-249 employees) was 33.4%.

For large organisations, the average Phish Prone Percentage (PPP) after one year of sustained training dropped to 4.9%.

For education institutions with 250-999 employees, the baseline Phish Prone Perecentage (PPP) was 31.2%.

It takes only another 28 seconds to enter the data after clicking a malicious link.

The median time to click on a malicious link after the email is opened is 21 seconds.

The median time for users to fall for phishing emails is less than 60 seconds.

HTML attachments make up 82% of malicious email attachments in the education sector

42% of organisations reported phishing and social engineering attacks in 2024.

84% of attacks against energy and utilities sector originated from phishing.