Nobody Owns the Agent

88% of organizations that deployed AI agents experienced a security breach in the past 12 months. Only 7.2% have a named individual with formal accountability for agent behavior. Those two numbers are not a coincidence.

Last month I was in a conversation with a client's security team and they pulled up their agent inventory. It was a spreadsheet. 47 entries. Three had no owner listed. Two the team could not recall deploying. That is not unusual anymore. Enterprise AI agents nearly doubled in Q1 2026 alone. The governance structures that were supposed to keep up have not kept up.

The accountability gap is structural, not accidental. Most organizations treat AI agents like service accounts: shared credentials, no dedicated identity, lumped into an existing access group. Only about 22% of organizations give agents independent, identity-bearing status. The rest cannot tell you what a given agent accessed, when, or why.

The attack surface is now documented. Check Point Research recorded a single operator using AI tools to breach nine government agencies, generating over 5,000 AI-executed commands from roughly 1,000 typed prompts. The gap between what one person can instruct and what an agent can execute is no longer theoretical. It is a case study.

And here is what I keep saying to clients who are moving fast on agent deployment: the fix is not a security tool. It is an accountability decision. Who owns each agent? What is its identity? What access does it have, and who gets paged if it behaves unexpectedly? Most enterprises cannot answer those questions for more than a fraction of their deployed agents. The deployment velocity has outrun the basic hygiene.

My people are building these systems. And the thing that actually scares me is not the sophisticated attack. It is the spreadsheet with three blank owner fields and nobody in the room who can explain them.

If you have more than 10 agents in production and no one with formal accountability for their behavior, you are in the 92.8%. The question is whether you find that out on your own terms or someone else's.