Scammers use programs to harvest e-mail addresses of all levels of employees from the companys Web site. This affords scammers the ability to send personalized e-mails throughout the company. The odds favor that if there is going to be a compromise, it will come from rank-and-file employees. Businesses should also be educating the remainder of their employees about these scams, says John Defterios. Defterio: Businesses that fail to provide that education risk not only the compromise of their systems, but potential damage claims.”]
Source: https://www.csoonline.com/article/2136584/who-s-at-risk-from-phishing-scams-.html