© Proofpoint

The study also asked about password behavior. Alarming: 16% use one or two passwords for all accounts.