Shadow AIAI SecurityCompliance
The most expensive AI security problem of 2026 is not a novel attack technique. It is an employee with a deadline, a browser tab open to a consumer chatbot, and a spreadsheet they need summarized by lunch.
IBM published its 2026 Cost of a Data Breach Report on July 29, and the headline number is the one every security leader who spent last year writing an AI acceptable-use policy should read carefully: shadow AI — unsanctioned AI tools used without security review — was a factor in 43% of breaches, up from 20% the year before. Coverage from Forkast and analysis at ComplexDiscovery put the same figure at the center of the report, drawn from 602 organizations across 17 countries.
That is a category more than doubling in twelve months. Very few risk categories move like that, and the ones that do are usually being driven by something other than attacker innovation.
The supporting figures matter more than the headline, because they describe why these breaches cost what they cost:
Read the third and fourth bullets together and the story stops being about AI at all. It is a governance story. Policy existed on paper in a third of organizations and enforcement existed almost nowhere — 92% is not a gap, it is an absence. When there is no control point between an employee and a model endpoint, an AI acceptable-use policy is a document describing behavior nobody is in a position to observe, let alone prevent.
The 247-day figure explains the cost premium. Data that leaves through a sanctioned system leaves a log. Data pasted into a personal chatbot account leaves nothing — no tenant record, no retention setting you control, no way to answer the only question that matters during an incident: what exactly went out, and when?
The same report tracked attacks using AI, and the trend is symmetric. Roughly one in four organizations reported an AI-driven attack in the past year, a 56% year-over-year increase, with those incidents averaging about $6 million — a million-dollar premium over non-AI attacks. Deepfake and impersonation attacks made up 45% of AI-driven incidents, AI-generated malware 19%, and AI-generated phishing 17%.
Notably, prompt injection incidents averaged $5.89 million and model inversion attacks $6.07 million — attacks against the AI systems organizations deployed themselves. That tracks with the 340% year-over-year rise in prompt injection incidents OWASP flagged earlier this summer, and it means the exposure is two-sided: the AI your employees use without permission, and the AI you deployed on purpose.
The instinct when a category doubles is to prohibit it. There is now reasonably consistent survey evidence that blanket bans on AI tools do not reduce usage — they relocate it. Employees move from a corporate account to a personal one, from a managed device to a phone, from a system that logs to one that does not. The activity continues; the visibility ends. That is the mechanism turning shadow AI into a $5.39 million line item rather than an IT annoyance.
The alternative is not permissiveness. It is giving the work somewhere sanctioned to go. If the approved path is genuinely usable — the models people actually want, no ticket queue, no degraded experience — the incentive to route around it mostly evaporates. Shadow AI is a symptom of a missing front door, and it responds to supply far better than it responds to prohibition.
IBM's number went from 20% to 43% in a single year. It is not going to fall because more organizations write stricter policies. Talk to us about what a governed AI front door would look like for your team.
Obiguard sits in front of every AI request your organization makes — screening prompts and outputs against the guardrails, compliance frameworks, and audit trails that stories like this one make necessary.
See how it works →