Thales Data Threat Report Finds Artificial Intelligence Emerging as Leading Enterprise Security Risk

Thales Data Threat Report Finds Artificial Intelligence Emerging as Leading Enterprise Security Risk

(IN BRIEF) Thales has published its 2026 Data Threat Report, warning that artificial intelligence has become the leading data security concern for organizations across multiple industries. The study finds that AI systems are increasingly granted broad access to enterprise data, creating new insider risks and expanding the potential impact of security weaknesses. Many organizations lack full visibility into their data and continue to store sensitive information without encryption, increasing exposure to attacks. The report also highlights the growing use of AI-driven deepfakes and misinformation campaigns and notes that investment in AI-specific security measures is lagging behind the pace of technological adoption.

(PRESS RELEASE) LA DÉFENSE, 26-Feb-2026 — /EuropaWire/ — Thales has released its 2026 Data Threat Report, highlighting the growing security challenges organizations face as artificial intelligence systems gain wider access to enterprise data. The report indicates that AI-driven transformation has become the leading data security concern across industries including automotive, energy, finance and retail. According to research conducted by S&P Global 451 Research, 61 percent of organizations now identify artificial intelligence as their primary data security risk, reflecting the rapid expansion of automated systems into core business processes.

As companies integrate AI into operations such as analytics, customer service and software development, these systems are increasingly granted extensive access to enterprise information. Unlike human users, automated systems often operate with fewer restrictions, creating new forms of insider risk. Weak identity governance, insufficient access controls and limited encryption can allow AI-driven processes to amplify vulnerabilities across complex IT environments.

Sebastien Cano, Senior Vice President of Cybersecurity Products at Thales, emphasized that insider threats now extend beyond human actors to include automated systems that may have been granted excessive trust. Without strong identity management and data protection controls, AI technologies can accelerate the impact of existing weaknesses in corporate environments.

Expanding Data Exposure

The report identifies significant gaps between the adoption of artificial intelligence and the implementation of effective data management practices. Only about one-third of organizations report having a complete understanding of where their data is stored, while fewer than four in ten organizations are able to fully classify their information assets. At the same time, nearly half of sensitive data stored in cloud environments remains unencrypted.

As AI tools access and process data across cloud and software-as-a-service environments, limited visibility complicates the enforcement of least-privilege access policies. These conditions increase potential exposure if credentials or system access rights are compromised.

Identity infrastructure has become a primary target for attackers. Credential theft is cited by 67 percent of organizations as the most common attack technique affecting cloud management environments. In addition, half of surveyed organizations identify secrets management, including control of API keys and authentication tokens, as one of their most pressing application security challenges.

AI-Driven Threats and Misinformation

The study also highlights the growing role of artificial intelligence in enabling more sophisticated cyberattacks. Nearly 60 percent of organizations report experiencing attacks involving AI-generated deepfakes, while 48 percent report reputational damage resulting from AI-generated misinformation or impersonation campaigns.

Human error continues to play a major role in data breaches, contributing to approximately 28 percent of incidents. The increasing use of automated systems can amplify the consequences of mistakes by allowing errors to propagate rapidly across interconnected environments.

Security Investment and Organizational Preparedness

Although organizations are increasingly aware of AI-related risks, investment in security capabilities has not kept pace with the rapid growth of AI-enabled systems. Approximately 30 percent of companies now allocate dedicated budgets specifically for AI security. However, a majority of organizations still rely on existing security programs originally designed to protect human users and traditional network perimeters.

Eric Hanselman, Chief Analyst at S&P Global 451 Research, noted that continuous visibility and protection of enterprise data are becoming essential as artificial intelligence becomes embedded in business operations. Effective data security strategies must be treated as fundamental infrastructure supporting innovation rather than as a separate function.

The report concludes that artificial intelligence is intensifying traditional cyber threats by increasing their scale and speed. As automated systems take on broader roles within enterprise environments, organizations will need to strengthen identity governance, encryption practices and data visibility in order to reduce the risk of AI-enabled attacks and protect critical information assets.

For more information, please download the full report and join our webinar hosted by Eric Hanselman, Chief Analyst at S&P Global 451 Research. ​

[i] Thales 2026 Data Threat Report, 2026, commissioned by Thales and conducted by S&P Global 451 Research

About Thales

Thales (Euronext Paris: HO) is a global leader in advanced technologies for the Defence, Aerospace, and Cyber & Digital sectors. Its portfolio of innovative products and services addresses several major challenges: sovereignty, security, sustainability and inclusion.

The Group invests more than €4 billion per year in Research & Development in key areas, particularly for critical environments, such as Artificial Intelligence, cybersecurity, quantum and cloud technologies. Thales has more than 83,000 employees in 68 countries. In 2024, the Group generated sales of €20.6 billion.

Media Contact:

Thales, Media relations
pressroom@thalesgroup.com

SOURCE: Thales