On July 2, Cybersecurity Dive reported that Bitdefender found 55% of cybersecurity workers were told to work on a cyber attack secrecy, showing how AI attacks, shadow tools, and disclosure pressure are turning cyber defense into a governance crisis.
Bitdefender’s 2026 Cybersecurity Assessment, based on research among 1,200 IT and cybersecurity professionals across the US, UK, France, Germany, Italy, and Singapore, shows a security market caught between confidence and strain.
More than half of respondents reported cyber attack secrecy in the previous 12 months, with unauthorized cloud access, business email compromise, and ransomware among the leading threats. The report also found that 52.6% believe AI is helping attackers more than defenders, while 47.4% lack visibility into employee shadow AI use.
Breach Silence Becomes a Security Risk
The most alarming data breach disclosure isn’t only that breaches are happening. It is that silence around them appears to be staying inside corporate culture. Bitdefender found that 55.2% of workers said they were told to keep a breach quiet, and the figure rose from 42% in 2024, to 58% in 2025, before flattening this year.
“That plateau is arguably just as troubling as the initial spike,” Bitdefender analysts wrote.
The number matters because data breach disclosure is no longer just a communications issue.
In the US and Europe, regulators have pushed companies that hid their data breach to ward faster and clearer reporting when customer data, critical infrastructure, or business systems are compromised. Yet Bitdefender’s analysis suggests that rules alone do not immediately change internal behavior.
The report pointed to a deeper gap between policy and workplace reality, saying cultural change is moving slower than compliance demands. For security teams, that creates a dangerous middle ground. A company may have written procedures for the hid data breach, but employees may still face pressure to delay, soften, or hide what happened.
“Changing behavior may require making disclosure feel less punishing,” analysts wrote, adding, “or perhaps the opposite: making secrecy impossible to justify.”
This is where AI makes the problem harder for data breach disclosure rules. If attackers are using AI to improve phishing, malware, social engineering, lateral movement, and automated vulnerability scanning, then delayed reporting can give intruders more time to expand.
Cyber attack secrecy may no longer be a contained incident. It can quickly become a wider operational failure.
AI Confidence Hides Cyber Secrecy
Cybersecurity Dive noted that slightly more than half of cybersecurity professionals think AI is helping attackers more than defenders. Bitdefender’s report supports that concern, with 70.1% of respondents saying phishing hid data breach are becoming more sophisticated, and 59% saying they have complaints about their endpoint detection and response or extended detection and response tools.
The cyber attack secrecy AI problem is also internal. Shadow AI, or employee use of unsanctioned AI tools, is creating visibility gaps. US respondents were the most likely to say they had full visibility into AI use at 63%, followed by the UK at 58% and Germany at 52%. Yet, the broader picture remains uneven, especially as employees adopt AI tools faster than security teams can monitor them.
The report also highlighted an American paradox, as US respondents were more strained and more confident at the same time. Respondents reported higher breach of concealment, more AI attacks, and greater tool complexity, while also showing stronger confidence in their security posture, vendor relationships, and willingness to invest.
That confidence gap extends inside organizations. Managers were more optimistic than frontline workers about cybersecurity practices, especially around AI visibility and alignment between security teams and the wider business.
For cybersecurity leaders, the cyber secrecy message is simple. AI may improve defense, but it also raises the cost of denial. If companies cannot see employee AI use, cannot staff 24/7 coverage, and cannot report breaches without fear, then attackers are not the only weakness.
The culture around data breach disclosures may become one of the biggest risks. Without faster reporting and clearer AI controls, cyber secrecy can turn small cyber incidents into long, expensive trust failures.
Inside Telecom provides you with an extensive list of content covering all aspects of the tech industry. Keep an eye on our Cybersecurity sections to stay informed and up-to-date with our daily articles.
