According to the phishing defense firm Cofense, the average user of email may receive 16 malicious emails per month, and 21% of those emails contain attachments, according to an analysis of 800,000 emails reported as potential phishing attempts and nearly 50,000 real phishing campaigns targeting organizations in 23 industries, including health care.

The analysis from Cofense, Cofense State of Phishing Defense 2018, found that one in 10 reported emails so far in 2018 was verified as malicious. This figure includes only those emails reported to Cofense as suspicious, not all emails received. In addition, the percentage of reported suspicious emails identified as real phishing attempts increased through the first half of the year, from 7% in January to 13% in July, the last month tracked in the report.