Across all industries, 20% of connected devices store sensitive data.

Last year, 18% of connected devices stored sensitive data, 35% lacked encryption, and 26% were unaccounted for.

Across all industries, 25% of connected devices are unaccounted for.

Across all industries, 30% of connected devices lack encryption.

11 device types appear on the riskiest devices list for the first time: Serial-to-IP Converters and Workstations (IT) Printers, Time Clocks, and RFID Readers (IoT) Power Distribution Units (PDUs), I/O Modules, and BACnet Routers (OT) Medication Dispensing Systems, Medical Image Printers, and DICOM Gateways (IoMT)

This year, point of sale (PoS) systems made the list of riskiest IoT devices.

Four new IT device types were added to the 2025 Forescout riskiest connected devices list: Application Delivery Controllers (ADC), Intelligent Platform Management Interfaces (IPMI), Firewalls, and Domain Controllers.

12 new device types were included on this year’s Forescout riskiest connected devices list.