Bank Filing Shows Why Unauthorized Tools Belong in Cyber Response Plans A bank’s SEC filing over unauthorized AI use shows how shadow AI can turn an employee shortcut into a material cyber event. Even if federal disclosure rules ease, companies still face state laws, sector requirements, escalating litigation risk and costs.