The finding comes from a report by the BakerHostetler Privacy and Data Protection team. The report studied 200 cases and found that employee negligence accounted for more than 37% of the incidents. Despite the organizations having policies concerning electronic data, employees still fell for Phishing scams.
In addition, employees failing to follow protocol, review logs or configure the system correctly led to the data breaches.