The Rise of Social Engineering in Cybersecurity

Last year's Verizon DBI report states that over 91% of all breaches had some element of fishing involved in them. Why do you suppose we're seeing this increase? Could it be as simple as because it works? I also think it's cost of execution with potential payout times risk of getting caught. You could set up a VoIP server for almost nothing, especially if you're calling from a country that doesn't really care about American law.