IBM finds 92% of companies hit by AI security breaches lacked basic access controls | SpinGraph: Safety framing
SpinGraph analysis of The Decoder's IBM finds 92% of companies hit by AI security breaches lacked basic access controls story: safety framing, The Shield, Spin…
Stuff That Spins turns press releases, announcements, research, and media coverage into structured narrative intelligence. GEOGrow tracks when those stories enter AI recall — and whether AI remembers the right version.
IBM finds 92% of companies hit by AI security breaches lacked basic access controls
access controls, AI security, IAM, governance
92% of AI security breaches traced to poor access controls, not model flaws IBM positions human/system governance—not AI itself—as the primary risk vector Findings reinforce need for enterprise identity and access management (IAM) integration with AI deployments
Emphasizes organizational accountability while minimizing scrutiny of AI system design, vendor security posture, or model-specific attack surfaces; downplays whether access controls were technically feasible or vendor-supported.
AI is secure when properly governed — the problem lies in enterprise execution, not technology.
92% of AI security breaches were caused by poor access controls, not AI model flaws.
No breakdown of which access control layers failed (e.g., API keys, role-based permissions, MFA, zero-trust enforcement); No mention of third-party AI service providers’ shared responsibility boundaries
Combines IBM’s authoritative brand with a precise statistic and contrastive framing ('model itself was rarely the problem') to make governance failures feel like the dominant, addressable risk — even though the article offers no evidence about how IBM determined causality or ruled out model-level vulnerabilities.
92 percent of companies that experienced an AI security incident had inadequate access controls for their AI systems.
According to IBM, 92 percent of companies that experienced an AI security incident had inadequate access controls for their AI systems.
Extracted statistics from the source narrative
companies with inadequate access controls
Among those experiencing AI security incidents