Lawyers have a term for the protection that comes from effort: "practical obscurity". What anyone may look at stays safe, in practice, as long as assembling it takes real work. Large companies have lived on that protection for decades without ever writing it down.
Walking through an enterprise, you see walls and closed doors, and you find the open ones by chance. Now an AI agent does to an enterprise what Street View did to the street: the walk becomes a map. It can survey from above, at machine speed, everything its user's permissions and connected systems allow it to reach, and it does not need to try the handles one by one, because it inherits the rights of the person who asked.
It can quietly compile a file of several tens of thousands of employees and their reporting lines. It may respect every access rule, and yet it moves a harmless piece of data to another level of sensitivity, by aggregation: one name, one title and one manager are banal, while the whole organization chart of a group is not. Access security asks who may read a record. Aggregation security asks what can be built from everything a person may read.
All of this holds only if permissions are properly configured, which nothing guarantees in large organizations that have let open files proliferate for years. Each of them is now a street on the map.
There is also an implicit contract at stake. Cloud security models were built on an economy of human access: everything stayed safe inside the tenant because each person saw only what they were entitled to see. The race to agents is changing that economy, as the whole industry ships, as quickly as possible, assistants that cross every deposit of data in that tenant, and the responsibility for the internal boundaries of security has, it seems, fallen back on the company. What used to be one person opening one document at a time has become the agent of every employee, from the intern to the CEO, able to cut across all the company's content at machine speed, with the risk of massive exfiltration.
We often worry about what hides in the shadows of the company's IT. For my part, I suspect the exposure will come from the full light thrown on what was always there: the urban plan of the company. In the age of agentic AI, many organizations may discover just how porous they are, without a single access control having been bypassed.
