🔴 AI Agent Breaches Spanish Organization, Modifies Personal Data

A Spanish organization has suffered a personal data breach at the hands of an agentic AI system (with human oversight).

On Sept. 14, Spain's Data Protection Agency (AEPD) — the Spanish government's data protection watchdog — described a breach report submitted by an unnamed organization, in which an unidentified hacker used a "well-known language model" to breach corporate personal data stores. Details are scarce, but the AI appears to have discovered and exploited a set of loose credentials, plus an enterprise application vulnerability, allowing its proprietor to modify personal data records and access corporate invoices.