Report by LastPass
The LastPass 2026 State of AI and SaaS Security Report
Key Findings
92% of business admins say AI is already in use across their organization.
Only 27% of business admins have an enforced AI governance program.
42% of business admins have no technical controls for managing employee access to AI tools (no allow lists, block lists, or DLP rules covering AI traffic).
68% of business admins say employees entering sensitive data into AI is their biggest concern.
Business admins' confidence in identifying and addressing employees entering sensitive data into AI averages 2.5 out of 5.
52.8% of users reuse passwords across accounts.
At least 21% of users are logging in with a credential that has appeared in a known data breach.
More than 65% of the applications organizations sign up for go unused within 30 days.
More than 64% of applications are in a category where organizations already use at least one other application, creating redundant use cases.