Enterprise AI Adoption Surges in Financial Services — But Data Leakage Risks Are Growing

Financial services organizations are rapidly shifting from personal AI tools to enterprise-managed platforms — but the risk of sensitive data exposure hasn't disappeared. New findings from Netskope Threat Labs show that regulated financial data accounts for 59% of all data policy violations linked to generative AI tools, even as enterprises move toward more controlled deployments.

The report finds that generative AI adoption is now near-universal in the sector. 70% of users actively use genAI tools, and 97% interact with AI-powered applications indirectly. But 94% of these applications use customer data for model training — creating new pathways for sensitive financial information to be exposed.

The Managed vs. Personal AI Divide

One encouraging signal: the use of enterprise-managed genAI tools surged from 33% to 79% year over year, while personal AI app usage dropped significantly. The shift to managed platforms brings better visibility and control — a critical step for regulated industries.

Key Risk Signals

• 15% of users still toggle between personal and corporate AI accounts, creating data leakage points
• 65% of data policy violations in personal cloud apps involve regulated data
• LinkedIn (92%) and Google Drive (84%) remain widely used in workplace environments, adding exposure surface
• GitHub is now the most exploited platform for malware distribution, affecting 11% of organizations

Gianpietro Cutolo, Cloud Threat Researcher at Netskope Threat Labs, said: "Regulated financial information continues to dominate policy violations, making this one of the highest-stakes environments for data protection."

What This Means for AI Strategy

Moving to enterprise platforms is the right move — but it's not enough on its own. Organizations need layered security: inspecting all web and cloud traffic, blocking non-essential applications, and applying data loss prevention (DLP) controls. As AI becomes more deeply embedded through APIs and integrated platforms, governance frameworks need to evolve at the same pace.

🔗 Read the full article on IT Voice