Insider-driven data loss is widespread, costly, and often unintentional. The 2025 Insider Risk Report exposes where visibility breaks down, the tools helping and hindering efforts, and what leaders are doing now to stop the next incident.
Organizations are facing limited visibility into SaaS and AI tools, with legacy DLP struggling to keep up, resulting in dangerous blind spots. To close the gaps, security leaders are pivoting to behavior-aware, next-gen strategies
Insider risk is no longer just about malicious actors. Everyday user actions, SaaS blind spots, and GenAI adoption are fueling costly incidents. This report highlights how security teams are shifting strategies to protect sensitive data.
Most incidents are unintentional
%
of incidents stem from negligent/compromised users
The attack surface has expanded
%
worry about GenAI exposing data
DLP is increasingly a barrier
%
find legacy DLP tools are effective
of organizations experienced insider-driven data loss in the past 18 months—with many reporting million-dollar impacts.