All to often users are blamed for falling for phishing emails - not so fast!
According to this El-Reg article, 100% of admins at British Universities succumb to attacks within 2 hours.
*admins* at *unis*
https://www.theregister.co.uk/2019/04/04/jisc_uni_pentesting_report/