Use of shadow IT—inner-organization IT systems built without IT department approval—is directly leading to breach incidents, and many in-house IT experts are unable to secure their companies’ infrastructures, according to a pair of recent surveys of European companies.

A survey of IT decision makers in U.K. and German organizations by Tenable Network Security found that over half admitted shadow IT had been introduced at their companies. Additionally, 65 percent of German respondents and 45 percent of U.K. respondents said shadow IT use directly led to a cyberattack in their organization within the past 12 months.