IncidentsSpain reports first data breach caused by an AI agent
The AEPD said an attacker deployed an autonomous agent that scanned for flaws and won read and write access to personal data and invoices.
16 Sept 2026
AI agent used in first AI-aided data breach reported in Spain
Spain's data protection agency (AEPD) reported the country's first personal data breach caused by an autonomous AI agent, which used an unnamed LLM to scan files, find vulnerabilities, and gain read/write access to personal data and invoices at an organization.
Disclosed 14 September 2026 · Record updated 16 September 2026
Impact
An AI agent chained together attack phases—scanning files, running vulnerability scans, and gaining read/write access to files containing personal data and invoices—resulting in a personal data breach at an organization in Spain.
Our coverage
IncidentsSources
- theregister.comhttps://theregister.com/cyber-crime/2026/09/16/spain-gets-its-first-taste-of-ai-aided-cyber-attack/5296844