Concentric AI’s 2025 Data Risk Report found Copilot accessed almost three million confidential records per organization in the first half of this year alone.

Is this about a not-yet-published report?

They don’t link to the report they are talking about, but only to the publisher. I can’t find a report about Copilot risk.

There’s a data risk report, supposedly updated twice a year, but from 2H 2023 (despite the web page being titled 2H 2025), and with no mention of Copilot.

There’s also this blog post, which appears to connect their data risk report with Copilot.

The blog post seems a lot more concrete, specific, elaborate, approachable, and actionable than the Techradar post. To me, at least.