Summary
When firms move from inventing AI to actually deploying it, where does the hidden governance cost show up? In roughly 84,000 firm-years of US 10-K filings, this paper shows that the answer is in breach-risk disclosure: AI adoption, not AI invention, is the margin most strongly associated with higher stated attention to data-breach risk.
The effect is economically meaningful at about 5 per cent of the sample mean, survives a non-AI digitisation placebo, and is strongest when AI deployment is customer-facing. The central wedge is visible in the figure below: once adoption and invention enter together, adoption stays positive while invention becomes economically negligible.