The rapid adoption of generative AI and the relentless growth of corporate data are converging to create a perfect storm for data security. According to Proofpoint's second annual Data Security Landscape report, organizations are facing widespread data loss as they struggle to protect sensitive information against these new challenges, compounded by the emergence of AI agents in the workplace.
Proofpoint's 2025 Data Security Landscape report reveals escalating data security challenges.
Key drivers are AI adoption, data sprawl, and insider risks, creating an "agentic workspace."
58% of significant data loss events are attributed to careless employees or contractors.
Just 1% of users are responsible for 76% of all data loss events.
44% of organizations lack sufficient oversight and controls for Generative AI tools.
Data volumes are soaring, with 41% of large enterprises managing over a petabyte of data.
The report underscores that people continue to be the primary catalyst for data loss. Nearly six in ten (58%) organizations attribute their most significant data loss events to careless employees or third-party contractors. Proofpoint's telemetry reveals a critical imbalance, showing that a tiny fraction of users—just 1%—are responsible for 76% of all data loss events. These incidents remain frequent, with organizations reporting an average of 11 per year, many taking weeks to resolve and leaving security teams overburdened.
Enterprise data volumes are soaring, stretching visibility and control to the limit. This unchecked expansion is a top concern, with 46% of respondents citing cloud and SaaS data sprawl as a major challenge. Compounding this issue is the rapid deployment of AI. The emergence of the "agentic workspace," where humans and AI systems work side by side, introduces a new class of risk. Two in five organizations cite data loss via GenAI tools as a top concern, and 32% flag unsupervised data access by AI agents as a critical threat. A significant oversight gap exists, with 44% of organizations admitting they lack sufficient visibility into GenAI use.
Security teams are further hampered by fragmented security architectures. More than one in five organizations (21%) report that resolving a data loss incident can take between one and four weeks. This complexity is exacerbated by tool sprawl, with 64% of organizations relying on six or more data security vendors, which increases operational complexity and drains resources.
“We’ve entered a new era of data security where insider threats, relentless data growth, and AI-driven change are testing the limits of traditional defenses,” said Ryan Kalember, chief strategy officer, Proofpoint. “Fragmented tools and limited visibility leave organizations exposed. The future of data protection depends on unified, AI-powered solutions that understand content and context, adapt in real time, and secure information across both human and agent activity.”
The findings highlight an urgent need for unified, AI-driven data security programs that can reduce risk, simplify operations, and enable the safe use of AI technologies.