Shadow AI - over-confidence and complacency are a toxic enterprise mix with disaster just around the corner…
A US financial services firm has provided a useful reminder of the dangers of the encroachment of Shadow AI within the enterprise, but will anyone listen?
Pennsylvania-based CB Financial Services revealed in a recently-filed material cybersecurity Form 8-K with US regulators that employees were able to use un-authorized AI to bypass IT firewalls, resulting in the accidental disclosure of customer names, social security numbers and dates of birth. It wasn’t even, it appears, an intentional act - an employee put such sensitive data into an unauthorized chatbot to save time.
According to the filing, on this occasion the incident did not involve a disruption to the bank's operations, customer access to accounts or services, payment systems, or core information technology infrastructure. But the volume and sensitive nature of the non-public information concerned raised warning flags internally.
It’s clear this could have been a lot worse and CB Financial Services have...
Copyright of this story solely belongs to diginomica.com. To see the full text click HERE
