Employees are feeding sensitive data into Copilots and AI tools at massive scale.
Most of it happens through unmanaged personal accounts, invisible copy/paste flows, and non-federated logins.
Traditional DLP tools don’t even see it.
A new security report from LayerX suggests that the biggest uncontrolled data-exfiltration channel in the enterprise today is AI.
According to the report
- 67% of AI usage happens on personal accounts
- 40% of uploaded files contain PII/PCI
- 77% of employees paste data into AI tools
Copy/paste has quietly become the #1 vector for data leaving the enterprise - and almost no security program is monitoring it.
In chasing productivity, companies have blown open data gates in the process
And the irony is, companies don’t even know this.
