{"id":8816,"date":"2026-09-17T13:27:40","date_gmt":"2026-09-17T13:27:40","guid":{"rendered":"https:\/\/forbes.co.il\/e\/?p=8816"},"modified":"2026-09-17T13:27:42","modified_gmt":"2026-09-17T13:27:42","slug":"ai-is-breaking-the-data-loss-prevention-model","status":"publish","type":"post","link":"https:\/\/forbes.co.il\/e\/ai-is-breaking-the-data-loss-prevention-model\/","title":{"rendered":"AI is breaking the data loss prevention model"},"content":{"rendered":"\n

The data loss prevention industry has organized itself around a relatively stable threat model.<\/p>\n\n\n\n

A disgruntled employee may copy files to a USB drive. Or a phishing attack could expose credentials to an outside attacker. Maybe someone accidentally CCs the wrong person on an email with sensitive information. Solutions focused on perimeter controls or policy rules were imperfect, but understandable when the threats were often caused by humans.<\/p>\n\n\n\n

But that model is no longer sufficient. According to research by Cyberhaven Labs, whose 2026 AI Adoption and Risk Report <\/a>analyzed data movements across 222 companies, nearly 40% of all AI interactions now involve sensitive data, with the average employee inputting proprietary information into an AI tool once every three days.<\/p>\n\n\n\n

Threats don\u2019t disagree insofar as they disaggregate, accelerate, and, in some new cases, remove the human from the equation entirely.<\/p>\n\n\n\n

Nitay Milner, co-founder and CEO of Orion Security, offered a framework for understanding how the landscape has changed. In a recent episode with Emily Fontaine, Vice President and Global Head of Venture Capital at IBM, which backed ORION\u2019s $32 million Series A in February 2026, he described the three categories of traditional data leakage that the DLP industry was built to address: human error, malicious insider activity, and external attackers.<\/p>\n\n\n\n

\u201c[Perhaps] I accidentally did \u2018Emily@IBC\u2019 and not \u2018IBM\u2019,\u201d he said, by way of illustration, \u201cand sent the entire board deck to the wrong person. That happens a lot. I call it keeping honest people honest.\u201d<\/p>\n\n\n\n

The second category, he noted, involves deliberate exfiltration, what he called the \u201cSnowden\u201d scenario. The third involved external actors penetrating an organization and quietly siphoning data over time.<\/p>\n\n\n\n

\n