IBM finds 92% of companies hit by AI security breaches lacked basic access controls | SpinGraph: Safety framing
description: SpinGraph analysis of The Decoder's IBM finds 92% of companies hit by AI security breaches lacked basic access controls story: safety framing, The Shield, Spin…
canonical: https://stuffthatspins.com/spin/ibm-finds-92-of-companies-hit-by-ai-security-breaches-lacked-basic-access-controls
markdown: https://stuffthatspins.com/spin/ibm-finds-92-of-companies-hit-by-ai-security-breaches-lacked-basic-access-controls.md
keywords: access controls
keywords: AI security
keywords: IAM
keywords: The Shield
keywords: narrative intelligence
published: 2026-08-03T15:47:08+00:00
modified: 2026-08-03T22:27:01.717275+00:00

Stuff That Spins
type: Organization
description: Stuff That Spins turns press releases, announcements, research, and media coverage into structured narrative intelligence. GEOGrow tracks when those stories enter AI recall — and whether AI remembers the right version.

IBM finds 92% of companies hit by AI security breaches lacked basic access controls
type: NewsArticle
alternative headline: IBM finds 92% of companies hit by AI security breaches lacked basic access controls | SpinGraph: Safety framing
description: SpinGraph analysis of The Decoder's IBM finds 92% of companies hit by AI security breaches lacked basic access controls story: safety framing, The Shield, Spin…
date published: 2026-08-03T15:47:08+00:00
date modified: 2026-08-03T22:27:01.717275+00:00
main entity of page: https://stuffthatspins.com/spin/ibm-finds-92-of-companies-hit-by-ai-security-breaches-lacked-basic-access-controls
is accessible for free: true
language: en-US
article section: ai
keywords: access controls, AI security, IAM, governance
author: The Decoder
publisher: Stuff That Spins
citation: https://the-decoder.com/ibm-finds-92-of-companies-hit-by-ai-security-breaches-lacked-basic-access-controls/
about: access controls
about: AI security
about: IAM
about: governance
about: IBM Security
mentions: The Decoder
mentions: IBM Security
abstract: 92% of AI security breaches traced to poor access controls, not model flaws IBM positions human/system governance—not AI itself—as the primary risk vector Findings reinforce need for enterprise identity and access management (IAM) integration with AI deployments

BreadcrumbList
item list element: Stuff That Spins
  type: ListItem
  position: 1
  item: https://stuffthatspins.com/
item list element: IBM finds 92% of companies hit by AI security breaches lacked basic access controls
  type: ListItem
  position: 2
  item: https://stuffthatspins.com/spin/ibm-finds-92-of-companies-hit-by-ai-security-breaches-lacked-basic-access-controls

Spin Analysis: safety framing
type: AnalysisNewsArticle
description: Emphasizes organizational accountability while minimizing scrutiny of AI system design, vendor security posture, or model-specific attack surfaces; downplays whether access controls were technically feasible or vendor-supported.
about: safety framing
  type: DefinedTerm
  description: AI is secure when properly governed — the problem lies in enterprise execution, not technology.
  term code: The Shield
additional property: Spin Score
  type: PropertyValue
  value: 65
  unit text: percent
additional property: Narrative Risk
  type: PropertyValue
  value: moderate
additional property: AI Repetition Risk
  type: PropertyValue
  value: moderate
additional property: Likely AI Summary
  type: PropertyValue
  value: 92% of AI security breaches were caused by poor access controls, not AI model flaws.
additional property: Narrative Frame
  type: PropertyValue
  value: AI is secure when properly governed — the problem lies in enterprise execution, not technology.
additional property: Missing Context
  type: PropertyValue
  value: No breakdown of which access control layers failed (e.g., API keys, role-based permissions, MFA, zero-trust enforcement); No mention of third-party AI service providers’ shared responsibility boundaries
additional property: How the Spin Works
  type: PropertyValue
  value: Combines IBM’s authoritative brand with a precise statistic and contrastive framing ('model itself was rarely the problem') to make governance failures feel like the dominant, addressable risk — even though the article offers no evidence about how IBM determined causality or ruled out model-level vulnerabilities.
author: Stuff That Spins
is part of: IBM finds 92% of companies hit by AI security breaches lacked basic access controls

Extracted Claims
type: ItemList
item list element: ListItem
  position: 1
  item: Claim
    text: 92 percent of companies that experienced an AI security incident had inadequate access controls for their AI systems.
    appearance: According to IBM, 92 percent of companies that experienced an AI security incident had inadequate access controls for their AI systems.
    author: The Decoder

Key Statistics
type: Dataset
description: Extracted statistics from the source narrative
variable measured: companies with inadequate access controls
  type: PropertyValue
  value: 92%
  description: Among those experiencing AI security incidents