Key Findings
90% of organizations experienced at least one insider incident in the past 12 months.
74% of organizations rank negligent insiders as their top concern, surpassing compromised accounts (65%) and malicious insiders (59%).
More than half of insider incidents cost $500,000 or more to remediate.
88% of organizations are concerned about autonomous AI agents operating as non-human insiders with privileged access.
11% of insider incidents exceed $2 million in remediation costs.
57% of organizations report success using AI for alert triage and risk scoring, while 26% report success automating incident response.
54% of organizations acknowledge confirmed or suspected AI-related insider incidents.
45% of organizations classify AI copilots and generative AI tools as insider risk.
53% of organizations say insider attacks are harder to detect than external cyber threats.
One-third of organizations operate five or more insider risk tools, yet 66% still struggle with detection accuracy and 58% cite tool and data fragmentation as a primary challenge.
94% of organizations say AI adoption is increasing their insider risk exposure.