Check Point Research Reveals Gen AI Adoption Leaks Sensitive Information

Check Point Research’s December 2025 Global Cyber Attack Statistics report reveals alarming trends regarding the security risks associated with Generative AI adoption. Organizations worldwide experienced an unprecedented volume of cyber threats, averaging 2,027 attacks weekly, which is a 9% increase from 2024. The United States and the United Kingdom were particularly affected, with over 1,440 organizations attacked weekly, marking a significant 39% rise in incidents compared to the previous year.

The report emphasizes that while ransomware remains a dominant threat, the integration of Generative AI tools has introduced new vulnerabilities. Sensitive corporate data is often input into AI systems without proper security controls, increasing the risk of leaks and exploitation by cybercriminals. This lack of governance and oversight is particularly concerning for sectors like government, education, and non-profits, which are already struggling with outdated infrastructure and insufficient cybersecurity expertise.

Among the most active ransomware groups identified in 2025, the Qilin ransomware gang, believed to be operating from Russia, was the most aggressive, followed by LockBit5 and Akira. These groups primarily targeted Windows-based systems and increasingly Linux infrastructures, showcasing the evolving capabilities of attackers.

The findings underscore the urgent need for organizations to implement stronger AI governance frameworks, modernize legacy systems, and invest in cybersecurity talent. As the threat landscape continues to evolve with the adoption of AI technologies, businesses must prioritize the protection of sensitive information to mitigate risks.

Implications for Organizations

Organizations must recognize that the rapid adoption of AI tools can inadvertently expose them to significant risks. The increase in cyber attacks indicates a growing attack surface, driven by digital transformation and cloud adoption. Companies should evaluate their data handling practices, especially regarding how sensitive information is utilized in AI systems.

Furthermore, the identification of specific ransomware groups highlights the need for organizations to enhance their defenses against such threats. Regularly updating security protocols and investing in cybersecurity training for employees can help mitigate the risks associated with these evolving threats.

Ultimately, the report serves as a wake-up call for enterprises to reassess their cybersecurity strategies in light of the growing reliance on AI technologies. By adopting comprehensive security measures and fostering a culture of cybersecurity awareness, organizations can better protect themselves against the increasing tide of cyber threats.