New research found that no industry was immune from risk. The findings come as phishing attacks become increasingly more convincing.