Some prompt injection incidents led to over $100,000 in real losses without requiring any code to be written.

35% of all real-world AI security incidents were caused by simple prompts.

Only 37% of organisations have policies to manage AI or detect shadow AI.

60% of AI-related security incidents led to compromised data.

Organisations using AI and automation extensively throughout their security operations saved an average of $1.9 million in breach costs.

16% of breaches studied involved attackers using AI tools.

Of the organisations that have AI governance policies in place, only 34% perform regular audits for unsanctioned AI.

Of those compromised by an AI-related breach, 97% report not having AI access controls in place.

Security incidents involving shadow AI led to more personally identifiable information (65%) being compromised compared to the global average (53%).

63% of breached organisations either don't have an AI governance policy or are still developing one.

72% of UK organisations believe AI will strengthen security in the years ahead

Security incidents involving shadow AI led to more intellectual property (40%) being compromised compared to the global average (33%).

8% of organisations reported not knowing if they had been compromised by an AI-related breach.

Organisations that used high levels of shadow AI observed an average of $670,000 in higher breach costs.

31% of AI-related security incidents led to operational disruption.

One in five organisations (which is 20%) reported a breach due to shadow AI.

51% of organizations have adopted AI for mission-critical operations.

Organisations using AI and automation extensively throughout their security operations reduced the breach lifecycle by an average of 80 days.

13% of organisations reported breaches of AI models or applications.

The explosion of AI is cited by 39% of cybersecurity and cyber risk leaders as a reason for increased difficulty in managing cyber risks today vs five years ago.