The Verizon Data Breach Investigation Report (DBIR) provides useful information related to information security.  The information was obtained from a collaboration of many security organizations and vendors.  The findings from the report confirm that phishing is a significant threat vector in today's environment.  Below are phishing related points from the DBIR.
  • 66% of malware is installed via malicious email attachments
  • 90% of incidences and breaches included a phishing element
  • 21% of ransomware involved social actions, such as phishing
  • 43% of all breaches included social tactics
  • 93% of social attacks were phishing related
  • 28% of phishing attacks are targeted
The following SlideShare highlights several of the key phishing facts within the Verizon DBIR. 
Read the full 2017 Verizon Data Breach Report to learn more about phishing and other security threats.  There is a specific section, Attack the Humans, dedicated to phishing and related tactics.