HiddenLayer

76% of organizations cite shadow AI as a definite or probable problem.

73% of organizations report internal conflict over ownership of AI security controls.

34% of organizations partner externally for AI threat detection.

Only a third (32%) of organisations are deploying a technology solution to address AI threats.

17% of AI attack sources originate from Africa.

96% of companies are increasing their AI security budgets in 2025.

More than 40% of organizations allocate less than 10% of their budgets to AI security.

85% of organizations support mandatory breach disclosure.

Malware hidden in public model and code repositories accounts for 35% of AI-related breaches.

93% of IT and security leaders continue to rely on open repositories for innovation.

The share of organizations citing shadow AI as a definite or probable problem increased from 61% in 2025 to 76%, a 15-point year-over-year increase.

91% of organizations added AI security budgets for 2025.

31% of organizations do not know whether they experienced an AI security breach in the past 12 months.

53% of organizations admit they have withheld breach reporting due to fear of backlash.

Autonomous agents account for more than 1 in 8 reported AI breaches.

Nearly half (45%) of organisations opted not to report an AI-related security breach due to concerns over reputational damage.

Security teams are spending nearly half their time mitigating AI risks.

76% of organisations report ongoing internal debate about which teams should control AI security.

51% of AI attack sources originate from North America.

21% of identified AI breaches originated from third-party applications

72% of IT leaders flagged "shadow AI" as a major risk.

21% of AI attack sources originate from South America.

32% of AI attack sources originate from Asia.

33% of identified AI breaches originated from chatbots.

74% of security leaders reported an AI breach in 2024. This is up from 67% reporting the same last year.

45% of identified AI breaches came from malware in models pulled from public repositories.

89% of IT leaders stated that AI models in production are critical to their organisation's success.

34% of AI attack sources originate from Europe.