The Cloud and Threat Report: 2026 finds that organisations now record an average of 223 GenAI-linked data policy violations each month. Among the top quartile of organisations, that figure rises to 2,100 incidents per month. The study draws on anonymised telemetry from millions of users worldwide gathered between October 2024 and October 2025. It examines how the spread of GenAI tools intersects with longer-standing cloud, identity and phishing threats.