Shadow AI explained: The work shortcut that could leak your company’s secrets
Malwarebytes explains shadow AI risks: unapproved chatbots and agents leak company data, with one in five organizations reporting linked breaches.
Malwarebytes published an explainer on shadow AI, the use of unapproved AI tools such as chatbots, browser extensions, and meeting-note bots that send company data to outside services. A Microsoft study found 71% of surveyed UK employees had used unapproved AI tools at work. IBM's 2025 Cost of a Data Breach research reported one in five organizations suffered a breach linked to shadow AI, with such organizations paying roughly $670,000 more per breach, while only 37% had policies to manage it. The article recommends approved enterprise AI tools, work accounts, and privacy-setting reviews.
- 71% of surveyed UK employees used unapproved AI tools at work (Microsoft study)
- One in five organizations reported a breach linked to shadow AI (IBM 2025)
- Organizations with heavy shadow AI paid roughly $670,000 more per breach
- Only 37% of organizations had policies to manage or detect shadow AI
- Organizations
- MalwarebytesNCSCMicrosoftIBM
From the original article
3 min read at malwarebytes.com
An AI shortcut can send confidential work data beyond your company’s control. Here’s how to get the benefits without taking unnecessary risks.
By @MetallicaMVP · malwarebytes.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.