For education institutions with 250-999 employees, the baseline Phish Prone Perecentage (PPP) was 31.2%.

For large educational institutions with more than 1,000 employees the baseline Phish Prone Percentage (PPP) was 31.7%.

After 90 days of training and simulated phishing tests, the Phish Prone Percentages (PPPs) for the education sector reduced to 19%, 19.4%, and 18% respectively for small, medium, and large organisations.

HTML attachments make up 82% of malicious email attachments in the education sector

KnowBe4's 2024 Phishing by Industry Benchmarking Report found that in the education sector specifically, the baseline PPP (Phish Prone Percentage) for small organisations (1-249 employees) was 33.4%.

The median time for users to fall for phishing emails is less than 60 seconds.

For large organisations, the average Phish Prone Percentage (PPP) after one year of sustained training dropped to 4.9%.

84% of attacks against energy and utilities sector originated from phishing.

42% of organisations reported phishing and social engineering attacks in 2024.