Enterprise GenAI Usage Exposes Critical Security Risks, New Reports Reveal

Widespread Exposure of Sensitive Data to GenAI Tools

A recent survey by TELUS Digital Experience has revealed that 57% of enterprise employees using generative AI (GenAI) assistants at work have admitted to entering sensitive company data into publicly available tools 1

1

. The survey, conducted in January 2025, gathered responses from 1,000 employees in U.S.-based companies with at least 5,000 staff members.

Types of Sensitive Data Exposed

Employees disclosed various categories of sensitive information entered into public GenAI tools:

• 31% reported entering personal details like names and email addresses
• 29% shared project-specific information, including unreleased product details
• 21% acknowledged inputting customer data like order histories
• 11% admitted to entering financial information such as revenue figures and budgets 1

  1

Shadow AI and Policy Enforcement

The survey also revealed that 68% of employees accessed GenAI assistants through personal accounts instead of company-sanctioned platforms, indicating a trend of 'shadow AI' 1

1

. This usage occurs without IT and security oversight, heightening risks related to data exposure and compliance violations.

Despite 29% of respondents confirming clear AI usage policies prohibiting the input of sensitive information, enforcement is inconsistent. Only 24% of employees indicated they had received mandatory training on AI usage, while 44% expressed uncertainty regarding the existence of AI policies at their companies 1

1

.

Invisible GenAI Usage in Enterprises

The "Enterprise GenAI Data Security Report 2025" by LayerX provides further insights into the practical application of AI tools in the workplace. The report reveals that nearly 90% of enterprise AI usage occurs outside the visibility of IT, exposing organizations to significant risks such as data leakage and unauthorized access 2

2

.

GenAI Usage Patterns and Risks

LayerX's report highlights several key findings:

• Approximately 15% of users access GenAI tools on a daily basis
• 50% of users currently use GenAI every other week
• 39% of regular GenAI tool users are software developers, indicating a high risk of source code and proprietary information leakage
• Nearly 72% of employees access GenAI tools through personal accounts for work purposes
• Only about 12% of corporate account access is done with SSO 2

  2

Data Pasting Activity and Security Implications

The report found that among users who submit data to GenAI tools, pasting of corporate data occurs almost 4 times a day on average. This could include sensitive information such as business data, customer information, financial plans, and source code 2

2

.

Productivity Benefits and Employee Sentiment

Despite the security risks, the TELUS Digital survey reported significant productivity benefits:

• 60% of employees stated that AI assistants help them work faster
• 57% said these tools improve efficiency
• 49% reported enhanced work performance
• 84% expressed a desire to continue using AI in their roles 1

  1

Recommendations for Enterprise GenAI Security

Experts emphasize the need for new security strategies to manage GenAI risks. Traditional security tools fail to address the modern AI-driven workplace where applications are browser-based. Recommendations include:

• Implementing structured AI policies and employee training programs
• Developing secure AI platforms to address security gaps
• Employing browser-based security for visibility into AI SaaS applications
• Utilizing DLP solutions specifically designed for GenAI 1

  1

  2

  2