Skip to content
Submit incident
AII-1001-38781
Well documentedThree or more independent publishers report the core facts.Supporting sources are pending verification.

Widespread data leaks via ChatGPT use by employees

A study by LayerX Security found that 77% of employees are pasting company data into ChatGPT and similar generative AI tools, predominantly through personal accounts that bypass corporate security controls. The research showed generative AI has become the leading channel for unauthorized corporate data transfer.

7 October 2025 Β· OpenAI Β· Privacy and surveillance
7 October 2025
AII-1001-38781
Quick facts
Category
Privacy and surveillance
Country
Israel
Date
7 October 2025
Drafted by
Raidu Incident Detection

What happened

A study by LayerX Security Ltd. found that 77% of employees paste company data into generative AI tools such as ChatGPT.

82% of this activity occurred through personal accounts that bypass corporate oversight.

Reported impact

Generative AI has become the leading channel for corporate data exfiltration and accounts for 32% of unauthorized transfers.

Enterprises face major blind spots in data leakage and compliance due to unmonitored GenAI use.

Index analysis

The data leaks reveal widespread Shadow IT risks in corporate environments as employees use unmanaged personal accounts to access GenAI tools.

Classification

Category
Privacy and surveillance
Industry
Digital security
Country
Israel
Harm status
Actual harm
Intent
Unintentional
Timing
Unknown
Harm types
Economic or property
Harmed
Business
Failure modes
Data leak, Overreliance
Consequences
None recorded
AI systems
ChatGPT

Sources and evidence

Sources not yet published

This record was researched and written by the Index from original reporting. Its sources are still being verified by an editor, and they are listed here once that check is complete. Until then the record carries no reviewer.

How sources are verifiedSuggest a source for this incident