Maybe lawyers aren’t so clever after all. In fact, many of them might be a bit thick.

The truth hurts, but that’s what Verizon’s 2015 Data Breach Investigations Report seem to suggest. As lawyers Karen Rubin and Tom Zych of Thompson Hine note with alarm, the report finds that a company’s legal department is “far more likely to actually open [a phishing] e-mail than all other departments.”