The AI Governance Gap: Verizon's 2026 DBIR Shows Attackers Scaling AI While Employees Leak Data Through It

The report also revealed that 67% of employees access AI tools from non-corporate accounts on corporate devices, highlighting a significant governance gap. The findings come from the annual DBIR, which analyzes data breach incidents from the previous year.

The report notes that attackers are increasingly leveraging AI for multiple phases of intrusions, from initial access to exfiltration, with 15 techniques now routinely involving AI. On the defensive side, the 67% figure indicates widespread use of unauthorized AI tools by employees, often bypassing corporate security controls. Verizon's analysts described this as a 'governance gap' where policy lags behind AI adoption.

The DBIR underscores the need for organizations to implement AI governance frameworks that address both external threats and internal misuse. Verizon recommends that companies adopt clear policies for employee AI use, deploy monitoring for unauthorized AI access, and ensure that AI systems used by attackers are anticipated in threat models.