🔴 AI agents stole 600,000 credit cards! But they deleted 180 tables

Gambit Security described a campaign where AI agents worked on 105 attacks in five days and helped steal over 600,000 records containing unexpired payment card data.

From September 10 to 15, the attacker attacked dozens of online stores, with at least 27 companies compromised to varying degrees.

The activity began as early as July 2026 and continues today. Gambit cites a Fortune 500 hospitality company, a major American airline, an industrial products supplier, and an online clothing store among the organizations involved.