As a small or medium business professional, chances are you’ve heard about phishing. Phishing scams—ploys that cybercriminals use to trick unsuspecting people into revealing sensitive information and steal their identities—are a serious problem for both consumers and business owners. In fact, over the last five years, there has been a steady increase in attacks targeting businesses with less than 250 employees,with 43 percent of all attacks targeted at small businesses in 2015.But phishing attacks aren’t only targeting businesses, they’re also targeting employees in order to gain access to a business’ sensitive data.