Recent surveys reveal a trend in employee use of AI that may present security risks to organizations — workers are deploying consumer-facing AI tools without the oversight of their employers/IT departments and without clear security policies. Cybernews Business Digital Index found that 84% of analyzed AI tools have been breached, suggesting enterprises using these tools (knowingly or unknowingly) may have data at risk. 

Among analyzed AI tools, the report found uneven — often poor — security performances. Only 33% earned an A rating while 41% received a D or F ranking. 

“What is mostly concerning is the false sense of security many users and businesses may have,” Vincentas Baubonis, Head of Security Research at Cybernews, remarks. “High average scores don’t mean tools are entirely safe — one weak link in your workflow can become the attacker’s entry point. Once inside, a threat actor can move laterally through systems, exfiltrate sensitive company data, access customer information, or even deploy ransomware, causing operational and reputational damage.”

Approximately 75% of employees utilize AI in the workplace; meanwhile, only 14% of organizations have established clear AI security policies. The gap between usage and security could leave organizations vulnerable to credential theft and data exposure.