The average organization experienced 223 incidents of data policy violations related to generative AI applications each month from October 2024 to October 2025.

The average organization saw a twofold increase in data policy violations related to generative AI applications over the past year.

Clicks on phishing links decreased by 27%, from 119 per 10,000 users last year to 87 per 10,000 users this year.

The percentage of AI users utilizing personal AI applications decreased from 78% to 47% from 2024 to 2025.

The percentage of users uploading data to personal cloud applications increased by 21% over the past year, with 31% of users in the average organization uploading data monthly.

87 out of every 10,000 users clicked on a phishing link each month in 2025.

Regulated data accounted for 54% of data policy violations linked to personal cloud applications in 2025.

12% of organizations detected employee exposure to malware via GitHub each month in 2025.