Artificial intelligence has become a common tool in the workplace, but many businesses are unprepared for the risks it brings, according to a new 2026 Nationwide survey. The research, conducted by Edelman Intelligence from July 10-26, 2026, found that six in 10 business owners say employees are using public AI chatbots or writing tools for work-related tasks. However, only 36% have written policies governing employee AI use, and just 37% provide training on responsible use.
The survey also highlighted external threats: nearly one-third (31%) of small and mid-market business owners reported that their company had been targeted by a scam or fraud attempt using generative AI within the previous 12 months. Additionally, 35% believe employees are using unauthorized AI tools for work, and only 35% have an up-to-date incident response plan.
Inter Insurance Agency says these findings underscore how quickly new technology can create new exposures for businesses of all sizes. "AI has become incredibly accessible, both to legitimate businesses and to the people trying to exploit them," said Tim Derham of Inter Insurance Agency. "An employee can receive an email, phone call or even convincing content that appears to come from someone they trust. Businesses need to think about what happens before an attack, but also what happens afterward."
The implications for businesses are significant. As AI tools proliferate, companies face heightened risks of data breaches, business interruption, and liability from cyber incidents. Cyber insurance can be an important component of a broader risk-management strategy, potentially covering expenses related to such events, depending on the policy.
However, insurance alone is not enough. Inter Insurance Agency encourages businesses to establish clear policies regarding AI use, train employees to recognize phishing and impersonation attempts, control access to sensitive information, and maintain an incident-response plan. Businesses should also periodically review their cyber insurance as their operations and technology use change.
"The way companies work is changing extremely quickly," Derham added. "Your risk management and insurance shouldn't be based on what your business looked like three or four years ago."
With AI adoption surging, the survey suggests that many businesses need to close the gap between their use of AI and their cybersecurity practices to avoid becoming the next victim of AI-enabled fraud.
