85% of security and IT leaders identify security incidents, data exposures, or near misses where the root cause is an AI system.

35% of security and IT leaders identify shadow AI exposure as security incidents tied to AI systems.

61% of enterprises report data exposure from AI agent-related incidents.

65% of US-based managed service providers report that at least one client asked for help addressing the security or data-exposure risks of employee-owned devices in the past 12 months

45% of US-based managed service providers report that multiple clients raised concerns about the security or data-exposure risks of employee-owned devices in the past 12 months

Company breaches are the leading cause of consumer data exposure at 30%.

The percentage of users uploading data to personal cloud applications increased by 21% over the past year, with 31% of users in the average organization uploading data monthly.

In Q3 2025, over 200,000 passwords, hundreds of credit card records, and more than 4 million browser cookies were harvested by the PXA Stealer campaign.

Roughly 29% of reviewed iOS shopping apps access user data without declaring it in their App Store Privacy Overview.

96% of organizations surveyed experienced data loss or exposure from misdirected email in the past year.

45% of respondents are very concerned about sensitive data being shared with generative AI tools like ChatGPT.

Only 12% of organizations feel fully prepared to detect or respond to sensitive data being shared with GenAI tools.

21% of security professionals are concerned about whistleblowers sharing or exposing data.

34% of organizations reported sensitive data exposure and privacy incidents as the most common API security problem.

Nearly 7 in 10 retail & consumer goods organizations had APIs with misconfigured authorizations or data exposure issues. These retail & consumer goods APIs averaged 15 vulnerabilities per API.

The average cost of a healthcare data breach has reached $9.8 million. This average cost is nearly twice as high as the cross-industry average of $4.45 million, according to industry reports.

Over 259 million Americans — roughly 81% of the population — had their protected health information (PHI) compromised in 2024.

Medical identity theft victims face $13,500 in average costs and 200+ hours of resolution.

Individual breached records surged by more than 186%, revealing sensitive information such as passwords, emails, and credit card details.

83.8% of enterprise data input into AI tools flows to platforms classified as medium, high, or critical risk.