Phishing project cites most vulnerable sectors

No matter how much you may warn employees to be wary of phishing scams, there will always be a few who can't resist clicking on a link received through their work email. But some of them may have been surprised recently to know they were part of a research project.

Clearwater-based KnowBe4, an online security awareness training firm, conducted the research to determine which industry sectors are most susceptible to phishing scams, which can leave companies susceptible to cybercrime. It discovered that travel, education, financial services, government services and IT services were most vulnerable, with between 20% and 25% of companies taking the bait.

KnowBe4 targeted small and medium businesses listed on the Inc. 500, then used a data-gathering service to get publicly available email addresses. Up to 29,000 experimental emails were sent out to more than 3,000 businesses, and in nearly 500 instances at least one employee clicked the attached link. Once those workers clicked, they were informed that they had just taken part in phishing research.