Organizations are likely to make significant investments in generative AI to defend against social engineering attacks (31%).

67% of organisations are implementing usage guidelines for GenAI.

64% of global CISOs say enabling GenAI tool use is a strategic priority over the next two years.

In the U.S., 80% of CISOs express concern over potential customer data loss via public GenAI platforms.

More than half (59%) of organisations restrict employee use of GenAI tools altogether.

Three in five CISOs (60%) worry about customer data loss via public GenAI tools.

7.95% of employees in the average enterprise used a Chinese GenAI tool.

72.6% of all sensitive prompts analysed in Q2 originated in ChatGPT.

1.8% of all sensitive prompts analysed in Q2 originated in Perplexity.

Of these incidents involving Chinese GenAI tools, the exposed data types included: 32.8% involving source code, access credentials, or proprietary algorithms; 18.2% including M&A documents and investment models; 17.8% exposing PII such as customer or employee records; and 14.4% containing internal financial data.

15% of Google Gemini use by employees was via personal accounts.

13.7% of all sensitive prompts analysed in Q2 originated in Microsoft Copilot.

Code leakage was the most common type of sensitive data sent to GenAI tools.

Generative AI (GenAI) was involved in 70% of real-world AI security incidents.

2.5% of all sensitive prompts analysed in Q2 originated in Claude.

5.0% of all sensitive prompts analysed in Q2 originated in Google Gemini.

In Q2, the average enterprise saw 23 previously unknown GenAI tools newly used by their employees.

47.42% of sensitive employee uploads to Perplexity were from users with standard (non-enterprise) accounts.

Sensitive data in files sent to GenAI tools showed a disproportionate concentration of sensitive and strategic content compared to prompt data, with files being the source of 79.7% of all stored credit card exposures, 75.3% of customer profile leaks, 68.8% of employee PII incidents, and ◦ 52.6% of total exposure volume in financial projections.

26.3% of ChatGPT use by employees was via personal accounts.