Osegi
Security·2 min read

Kiberdom Survey: One in Three Russian Staff Shared Logins with AI

A Kiberdom study finds nearly a third of Russian employees gave AI tools work logins, keys or folder access in six months. Only 5% say their firm has written AI rules.

An office worker typing on a laptop while a chatbot interface and padlock icons hover over the screen, symbolising data shared with AI.
Image: rb.ru

Almost one in three employees at Russian companies has handed work logins, keys or folder access to AI chatbots over the past six months, according to a study by Kiberdom. Just 5% of respondents say their employer has written rules for using artificial intelligence.

What staff upload

Beyond credentials, employees feed neural networks the documents they handle every day. In the last six months, 25% uploaded commercial proposals, and 12% uploaded customer databases, including ones with personal data.

The main reasons for using AI are speeding up labor-intensive tasks (18%), analysing large volumes of information (11%) and preparing or editing documents (7%). Some 16% said they shared internal data because the company has no suitable corporate AI service, and 13% pointed to management encouraging the use of chatbots. One in five does not know which work data may be shared, and 9% do not consider the uploaded material confidential.

Rules are thin

Only 5% of staff report written AI regulations. Another 17% were given the rules orally, and 18% say their company defined categories of data that must not go to AI. At 22% of employers, uploading any material to external networks is banned.

Asked what they would do if a task required uploading a confidential document, 23% would first strip personal and restricted data, 14% would contact IT or information security, and 8% would upload it as is.

Companies lack oversight

Kiberdom also surveyed managers and specialists in information security, IT, HR and law. According to them, 18% of companies monitor AI use on work devices, while 23% do not. Some 32% said employees sent logins, passwords and access keys to AI services; 16% do not know what was shared, and 12% said no checks were carried out.

When violations occur, 23% of companies restrict access to AI services, 20% review cases individually, 11% explain the rules again, and 2% consider dismissal. The most common gap is a corporate AI service for internal data, named by 30% of respondents, followed by resources to monitor AI use, cited by 14%.

Apps worth a look

SUMO: the number puzzle

Tap the right tiles, add them up, hit the target. Easy to learn, hard to master. Free, for all ages.

Tags:kiberdomrussiaai securitydata leakscorporate policychatbots

More from this day

See all →

More in: Security

See all →