70% of students are early adopters of generative AI and use it to create or modify images.

In the U.S., 80% of CISOs express concern over potential customer data loss via public GenAI platforms.

64% of global CISOs say enabling GenAI tool use is a strategic priority over the next two years.

67% of organisations are implementing usage guidelines for GenAI.

More than half (59%) of organisations restrict employee use of GenAI tools altogether.

Three in five CISOs (60%) worry about customer data loss via public GenAI tools.

15% of Google Gemini use by employees was via personal accounts.

26.3% of ChatGPT use by employees was via personal accounts.

13.7% of all sensitive prompts analysed in Q2 originated in Microsoft Copilot.

72.6% of all sensitive prompts analysed in Q2 originated in ChatGPT.

1.8% of all sensitive prompts analysed in Q2 originated in Perplexity.

Of these incidents involving Chinese GenAI tools, the exposed data types included: 32.8% involving source code, access credentials, or proprietary algorithms; 18.2% including M&A documents and investment models; 17.8% exposing PII such as customer or employee records; and 14.4% containing internal financial data.

Of analyzed prompts and files submitted to 300 GenAI tools and AI-enabled SaaS applications between April and June, 22% of files (totaling 4,400 files) and 4.37% of prompts (totaling 43,700 prompts) were found to contain sensitive information.

The average enterprise uploaded 1.32GB of files (half of which were PDFs) to GenAI tools and AI-enabled SaaS applications in Q2. A full 21.86% of these files contained sensitive data.

Code leakage was the most common type of sensitive data sent to GenAI tools.

7.95% of employees in the average enterprise used a Chinese GenAI tool.

535 separate incidents of sensitive exposure were recorded involving Chinese GenAI tools.

68% of security leaders state that their boards now view the secure deployment of generative AI as a critical priority.

Sensitive data in files sent to GenAI tools showed a disproportionate concentration of sensitive and strategic content compared to prompt data, with files being the source of 79.7% of all stored credit card exposures, 75.3% of customer profile leaks, 68.8% of employee PII incidents, and ◦ 52.6% of total exposure volume in financial projections.

47.42% of sensitive employee uploads to Perplexity were from users with standard (non-enterprise) accounts.