Phishing was used in 22 percent of the breaches Verizon analyzed. Phishing jumped bribery and manipulation to become the most widely used social tactic, Verizon said. Phishing was used in more than 95 percent of targeted attacks. Cybercriminals used the technique against small and large organizations. A study conducted by Herndon, Va.-based ThreatSim, a phishing defense firm, found that just three phishing emails gives an attacker a better-than-50-percent chance of getting at least one click. Sending 10 phishing emails almost guarantees an employee will click on a phishing link.