
Nearly 40% of Employee Queries to Public AI Services Contain Corporate Secrets
Analysts at GK Solar examined 12,000 interactions logged by the Solar Dozor DLP system across 150 large Russian organizations in finance, industry, retail, telecom, IT, and government sectors during the first half of 2026. The study found that almost 40% of employee prompts sent to public AI services included confidential data. Of those risky queries, 41% contained source code and configurations, 30% held personal, financial or other sensitive information, 18% involved intellectual property, and 11% included passwords, tokens and API keys. Development teams accounted for 43% of the incidents, commercial units for 26%, analysts and HR for 23%, and other departments for 8%. A separate survey by UCSB and Solar revealed that 42.4% of 102 organizations suspected AI-related leaks and 8.1% had already experienced real incidents, while one-third still lack dedicated controls for AI and ML systems. Solar recommends approving allowed services, enforcing access segmentation and monitoring prompt content rather than imposing outright bans.
AntiMalwareAug 10, 2026Translated from Russian
