HiddenLayer
All Statistics
Malware hidden in public model and code repositories accounts for 35% of AI-related breaches.
76% of organizations cite shadow AI as a definite or probable problem.
73% of organizations report internal conflict over ownership of AI security controls.
74% of security leaders reported an AI breach in 2024. This is up from 67% reporting the same last year.
Security teams are spending nearly half their time mitigating AI risks.
Only a third (32%) of organisations are deploying a technology solution to address AI threats.
34% of organizations partner externally for AI threat detection.
More than 40% of organizations allocate less than 10% of their budgets to AI security.
85% of organizations support mandatory breach disclosure.
93% of IT and security leaders continue to rely on open repositories for innovation.
The share of organizations citing shadow AI as a definite or probable problem increased from 61% in 2025 to 76%, a 15-point year-over-year increase.
31% of organizations do not know whether they experienced an AI security breach in the past 12 months.
53% of organizations admit they have withheld breach reporting due to fear of backlash.
91% of organizations added AI security budgets for 2025.
Autonomous agents account for more than 1 in 8 reported AI breaches.
72% of IT leaders flagged "shadow AI" as a major risk.
89% of IT leaders stated that AI models in production are critical to their organisation's success.
45% of identified AI breaches came from malware in models pulled from public repositories.
33% of identified AI breaches originated from chatbots.
17% of AI attack sources originate from Africa.
32% of AI attack sources originate from Asia.
96% of companies are increasing their AI security budgets in 2025.
Nearly half (45%) of organisations opted not to report an AI-related security breach due to concerns over reputational damage.
76% of organisations report ongoing internal debate about which teams should control AI security.
51% of AI attack sources originate from North America.
21% of identified AI breaches originated from third-party applications
21% of AI attack sources originate from South America.
34% of AI attack sources originate from Europe.