Shadow AI Is Now a Material Cybersecurity Risk. The SEC Just Proved It.
A Pennsylvania bank employee used an unauthorized AI tool on customer data — no hacker, no breach, no operational disruption — and the bank still filed an SEC Form 8-K. The first shadow AI disclosure is a blueprint for what your regulators are about to ask.