This article from Health IT Security looks how business email compromise attacks make up 7% of spear-phishing attacks. A recent Barracuda report found the targeted nature of the impersonation emails are three times more successful than traditional phishing attempts.