Aepd - GoKawiil

Spanish Regulator Confirms AI Agent Used to Breach Corporate Data, Alter Records

Spain's Data Protection Agency (AEPD) disclosed that an organization reported a breach in which an attacker used a mainstream language model to locate weak credentials and exploit an application flaw. The AI agent reportedly enabled the attacker to access corporate invoices and modify personal data records, though the organization and hacker remain unnamed.

darkreading.com · 2026-09-18

Spain's AEPD receives first reported AI-agent-driven data breach

Spain's Data Protection Agency (AEPD) has received its first notification of a breach allegedly executed by an autonomous AI agent built on a large language model. According to the report, the agent found system vulnerabilities, logged in, probed connected applications, then altered personal data and accessed financial records. The AEPD has not yet verified the claims but says the case demonstrates that AI-driven breaches have moved from theory to practice.

bleepingcomputer.com · 2026-09-16