Employees are increasingly compromising business-critical data by keeping it on personal devices, such as laptops and smartphones, according to a report published by McAfee in collaboration with Carnegie Mellon.

The survey found that 72 percent of devices used for work were laptops, and 48 percent were smartphones. Just 10 percent of devices being used by business people were tablets.

But regardless of what kinds of devices they’re using, the data contained on them is far from just personal texts and tweets. One in three users kept sensitive work-related information on their mobile devices, while only one in three employees were even aware of their company’s mobile security policies.

Exacerbating the problem is that these devices are routinely lost or stolen, compromising the data stored on them.

According to the survey, four in 10 organizations have had mobile devices lost or stolen and half of those devices contain business critical data. Additionally, more than a third of mobile device losses have had a financial impact on the organization.

The report concludes that businesses need to be savvy about the risks involved with mobile use for enterprise, suggesting more nuanced policies, as well as increased education for employees and IT departments.

The survey spanned the globe, including more than 1,500 respondents from 14 countries.

The participants were split between two surveys targeted towards general end users of mobile devices and senior IT decision makers in companies with 100 or more employees.