Securing sensitive data in the AI era
Comments on “Securing sensitive data in the AI era”
Claim-checked. Scored by all three judges, and its checkable claims were compared with the sources it cites. How far stories are checked
This article examines shadow AI, the unsanctioned use of AI tools by employees, and why it creates serious risk for development teams working on client code.
Why it ranked
No. 24 of 155 with a score of 0.66. The panel rated it highest on practical relevance (0.85) and new information (0.81), lowest on significance (0.55).
- AI judgeJudge 2claude-haiku-5-5
- Practical, long-form guidance on shadow AI risks and mitigations for dev teams with client code; covers security and data policy with concrete code examples, though largely familiar advice and some unsupported statistics cited secondhand.
- AI judgeJudge 3gpt-5.6-luna
- Practical guidance for controlling shadow AI, protecting client data, configuring IDE assistants, pseudonymizing inputs, and handling incidents. Useful and timely, though evidence is secondary, some legal claims are simplified, and technical depth is moderate.
Each judge wrote its line after answering the rubric, with the site and the author still hidden. Every answer behind this is in the table under Score.
Score
0.66total under rubric v2.2
- Significance0.55
- Reader interest0.71
- Audience breadth0.70
- Practical relevance0.85
- Substantiated0.60
- Technical depth0.68
- New information0.81
- Counts against: Promotional0.06
- Counts against: Overclaim0.23
Each judge’s answer per question (0–1), their mean and spread, and what the question adds to the score (weight × mean).
| Question | Judge 1 | Judge 2 | Judge 3 | Mean | Spread | Weight | Contribution (weight times mean) |
|---|---|---|---|---|---|---|---|
| Significance | 0.71 | 0.35 | 0.58 | 0.55 | 0.36 | +0.24 | +0.132 |
| Reader interest | 0.82 | 0.60 | 0.72 | 0.71 | 0.22 | +0.26 | +0.185 |
| Audience breadth | 0.87 | 0.60 | 0.63 | 0.70 | 0.27 | +0.13 | +0.091 |
| Practical relevance | 0.99 | 0.75 | 0.82 | 0.85 | 0.24 | +0.22 | +0.188 |
| Substantiated | 0.69 | 0.50 | 0.62 | 0.60 | 0.19 | +0.05 | +0.030 |
| Technical depth | 0.93 | 0.55 | 0.57 | 0.68 | 0.38 | +0.05 | +0.034 |
| New information | 0.90 | 0.60 | 0.93 | 0.81 | 0.33 | +0.05 | +0.041 |
| Promotional | 0.04 | 0.10 | 0.04 | 0.06 | 0.06 | −0.19 | −0.011 |
| Overclaim | 0.13 | 0.20 | 0.36 | 0.23 | 0.23 | −0.11 | −0.025 |
| Sum of contributions | +0.664 | ||||||
| Claim-check penalty | 0.000 | ||||||
| Total, as published | 0.664 | ||||||
Spread is the highest minus the lowest judge answer. marks a spread above 0.40: the judges disagree, and the story is marked contested.
The badge for this ranking, for the author's page or anyone's: one line of HTML, and it links back here.
<a href="https://rubric.hrih.si/editions/2026-10-28/24/"><img src="https://rubric.hrih.si/badge/2026-10-28/24.svg" alt="Ranked #24 on Rubric, 28 Oct 2026" width="245" height="28"></a>Claim check
Claim check: 6 matches source · 1 no source given · 1 couldn’t check. Each claim is compared with the source the article itself cites; a flag is published only when both checkers agree.
Matches sourceNumber
Palo Alto Networks' State of GenAI 2025 found GenAI traffic grew by more than 890% in 2024, and an average organization had 66 GenAI apps, 10% of them classified as high risk.
The cited source says the same thing.
The article says “GenAI traffic grew by more than 890% in 2024, and an average organization had 66 GenAI apps, 10% of them classified as high risk”
The source says “GenAI traffic surged more than 890% in 2024”
Source cited by the article: paloaltonetworks.com/cyberpedia/what-is-shadow-ai
Matches sourceNumber
Palo Alto Networks found GenAI-related data loss incidents grew more than 2.5 times and now make up 14% of all such incidents.
The cited source says the same thing.
The article says “GenAI-related data loss incidents grew more than 2.5 times and now make up 14% of all such incidents”
The source says “GenAI-related DLP incidents increased more than 2.5X, now comprising 14% of all DLP incidents”
Source cited by the article: paloaltonetworks.com/cyberpedia/what-is-shadow-ai
Matches sourceNumber
A 2024 CybSafe survey across 7 countries found 38% of employees shared sensitive work data with AI tools without their employer knowing.
The cited source says the same thing.
The article says “38% of employees shared sensitive work data with AI tools without their employer knowing”
The source says “More than a third (38%) of employees share sensitive work information with AI tools without their employer’s permission, according to new research by CybSafe and the National Cybersecurity Alliance (NCA”
Source cited by the article: infosecurity-magazine.com/news/third-employees-sharing-work-info
Matches sourceNumber
An ESET and DAGMA study in Poland (2026) found 62% of employees use AI at work, but only 27% of companies have a written AI policy.
The cited source says the same thing.
The article says “62% of employees use AI at work, but only 27% of companies have a written AI policy”
The source says “62% pracowników korzysta już z narzędzi AI w obowiązkach służbowych”
Source cited by the article: kadry.infor.pl/kadry/hrm/informatyzacja_hrm/7611037,pracownicy-nie-chca-rezygnowac-z-ai-nawet-gdy-firma-tego-zakazuje-korzystaja-z-narzedzi-po-cichu.html
Couldn’t checkDate
In 2023 a Samsung engineer pasted confidential source code into ChatGPT, and Samsung responded by banning generative AI tools for employees.
The source was unreachable, paywalled or too long, or the two checkers disagreed.
The article says “in 2023 an engineer at Samsung pasted confidential source code into ChatGPT to optimize it. Samsung's answer was to ban generative AI tools for its employees”
The source says No passage could be compared.
Source cited by the article: forbes.com/sites/siladityaray/2023/05/02/samsung-bans-chatgpt-and-other-chatbots-for-employees-after-sensitive-code-leak
Matches sourceNumber
In the ESET and DAGMA study, 35% of AI users said they would try to get around company blocks, and 26% would generate what they need on a private device and send it to their work email.
The cited source says the same thing.
The article says “35% of AI users said they would try to get around company blocks, and 26% would generate what they need on a private device and send it to their work…”
The source says “35% użytkowników AI przyznaje, że próbowałoby obejść firmowe blokady, gdyby pracodawca ograniczył im dostęp do ulubionych narzędzi. Co więcej, 26% deklaruje”
Source cited by the article: kadry.infor.pl/kadry/hrm/informatyzacja_hrm/7611037,pracownicy-nie-chca-rezygnowac-z-ai-nawet-gdy-firma-tego-zakazuje-korzystaja-z-narzedzi-po-cichu.html
Matches sourceNumber
According to ESET and DAGMA, only 38% of Polish companies pay for corporate AI licenses.
The cited source says the same thing.
The article says “only 38% of Polish companies pay for corporate AI licenses”
The source says “tylko 38% firm zainwestowało w korporacyjne licencje AI”
Source cited by the article: kadry.infor.pl/kadry/hrm/informatyzacja_hrm/7611037,pracownicy-nie-chca-rezygnowac-z-ai-nawet-gdy-firma-tego-zakazuje-korzystaja-z-narzedzi-po-cichu.html
No source givenNumber
GDPR fines go up to 20 million euro or 4% of annual turnover.
The article gives no link or citation for it.
The article says “GDPR fines go up to 20 million euro or 4% of annual turnover”
The source says No source to compare with.
Also covered by
No other coverage was clustered with this story.
Elsewhere
Elsewhere: HN 2 pts, not on front page
Recorded for context only, checked 28 Oct 2026, 06:47 UTC. It played no part in the ranking.