IncidentsSpain logs what regulators call first agentic AI data breach
Spanish regulators say an autonomous AI agent chained a successful login, vulnerability discovery and access to personal data in a single run.
16 Sept 2026
AI Agent-Driven Data Breach Reported to Spanish Regulator
Spanish data protection regulators disclosed what they describe as the first data breach carried out by an autonomous AI agent, which chained together a successful login, vulnerability discovery, and access to personal data.
Disclosed 16 September 2026 · Record updated 16 September 2026
Impact
An AI agent autonomously executed a multi-step attack—logging in, discovering a vulnerability, and accessing personal data—resulting in a reported data breach.
Our coverage
IncidentsSources
- securityweek.comhttps://securityweek.com/first-agentic-ai-data-breach-reported-to-spanish-regulator