A recent article highlights how users and organizations respond to phishing messages and breaches.
“Verizon noted that 23 percent of recipients open phishing messages. But
simply opening an email won’t necessarily install malware on a machine.
More dangerous are the 11 percent of recipients who go so far as to
click on malicious attachments.”
http://www.wired.com/2015/04/email-phishing-attacks-take-just-minutes-hook-recipients/