The 2024 Verizon Data Breach Report sites that the median time for users to fall for phishing emails is less than 60 seconds. On average, the time to click on a malicious link after the email is opened is 21 seconds, with the user taking 28 seconds to enter their credentials.
ITS is working with the Division of Human Resources (DHR) on revamping redeploying the KnowBe4 phishing campaigns to drive down the number of phishing email clicks. The report indicates 20% of people who are sent a phishing email open it and 11% click on malicious links. We hope the KnowBe4 phishing education will help us reduce these numbers for State employees.
https://www.verizon.com/business/resources/infographics/2024-dbir-infographic.pdf
