One organization I work with has seen a 400% increase in phishing attacks in just the last year. 93% of phishing messages carry ransomware, and many seek to collect personal information for later use. Phishing is also a drain on the information technology team, particularly the information security organization. The average yearly cost to a 10,000 person company for phishing-related activities is a staggering $3.7 million dollars. This includes an average of 4.16 hours per year wasted by each employee dealing with phishing.”]
Source: https://www.csoonline.com/article/3177395/phishing-draining-the-corporate-bottom-line.html