A study by KnowBe4 surveyed multiple companies and found 43% of their employees clicked on simulated bad links that led to phishing attacks and malware.