The Proofpoint 2025 Data Security Landscape Report reveals a troubling paradox: as artificial intelligence transforms how organizations operate, it also amplifies long-standing vulnerabilities rooted in human behavior and data sprawl. Based on insights from 1,000 security professionals across 10 countries, the report captures a world where AI, cloud sprawl, and insider risks collide—creating unprecedented challenges for enterprises trying to protect their most valuable asset: data.
People Still at the Center of Breaches
Despite the rapid adoption of automation and AI, human error remains the leading cause of data loss. Approximately 85% of organizations experienced at least one data loss incident in the past year, with careless employees or contractors being responsible for 58% of these incidents. Proofpoint’s data shows that just 1% of users cause 76% of all data loss events, underscoring the need for behavior-aware security systems that adapt to human risk.
Data Growth and Sprawl Escalate Risks
Enterprise data volumes are exploding—29% of companies saw growth of over 30% last year. For large organizations, over 40% now manage more than a petabyte of information. Yet, 27% of cloud data sits abandoned and unused, inflating storage costs and creating invisible vulnerabilities. Nearly half of respondents cite cloud and SaaS sprawl as a top challenge, while 55% report that up to 40% of their data is sensitive, raising the stakes for governance and compliance.
AI: The Double-Edged Sword
AI tools are both a risk and a remedy. Two in five organizations are worried about data leaks from GenAI applications, and 32% fear unsupervised access by AI agents. Yet, 65% have started using AI-enhanced tools to classify data, and 59% employ them to detect unusual user behavior. The report notes that successful AI governance must include secure design, visibility, and guardrails to prevent misuse.
Fragmentation and Fatigue Among Security Teams
Security operations are buckling under complexity. 64% of companies juggle six or more security vendors, and a fifth take up to four weeks to resolve incidents. With 35% citing a lack of skilled personnel, teams are stretched thin, managing endless alerts without unified oversight.
A Unified, AI-Driven Future
Proofpoint concludes that the path forward lies in unified, AI-powered data security platforms that integrate detection, response, and insider risk management. By combining human-centric insights with machine intelligence, organizations can reduce operational burden, lower costs, and secure their data in a world increasingly run by both humans and AI.
