Most organizations operate under a dangerous misconception that their data is safe with encryption at rest and in transit.