Refreshed and updated on April 23rd, 2026. Key Takeaways: Copilot’s biggest security risk is overly permissive data access. Copilot can access everything a user can within Microsoft 365, and Concentric AI’s Data Risk Report found that 16% of business-critical data is overshared, with an average of 802 thousand files at risk per organization.