A survey conducted by Webroot found 80 percent of companies experienced at least one variety of web-borne attacks in 2012, and that phishing was the most common attack, among other findings.
Source: http://www.net-security.org/secworld.php?id=14680