Report by Thales

Thales 2026 Data Threat Report

10 FINDINGSPublished Feb 25, 2026
View Original Report →

Key Findings

Only 34% of organizations know where all their data resides, whatever the level of criticality.

Data VisibilityData Governance

47% of sensitive cloud data remains unencrypted.

Cloud SecurityCloud Data EncryptionCloud Data

Credential theft is the leading attack technique against cloud management infrastructure, cited by 67% of organizations experiencing cloud attacks.

Credential TheftCloud SecurityIdentity ManagementCloud Management Infrastructure

50% of organizations rank secrets management among their top application security challenges.

Application SecuritySecrets ManagementIdentity Management

48% of companies report reputational damage tied to AI-generated misinformation or impersonation campaigns.

MisinformationBrand ReputationAI Impersonation

30% of companies dedicate specific budgets to AI security.

AI SecurityInvestmentBudget

Nearly 60% of companies report experiencing deepfake-driven attacks.

DeepfakesSynthetic Media

53% of organizations still depend on traditional security programs built primarily for human users and perimeter-based controls.

Security StrategyIdentity ManagementHuman UsersPerimeter-Based Controls

Human error contributes to 28% of breaches.

Data BreachesHuman Error

39% of organizations can fully classify all their data.

Data ClassificationData Governance