Spain's AEPD Reports First Data Breach Tied to Autonomous AI Agent

The blog article was published earlier this week by Francisco Pérez Bes, president and deputy of the AEPD. He said the agent first used the target's publicly accessible files, through which it was able to log into its system. Once inside, the agent scanned for vulnerabilities. After finding one, it used the flaw to modify personal data and gain access to invoices.

Pérez Bes said little is known about the incident and that a thorough investigation is ongoing. He wrote that the attack does not imply the AI model or the provider's infrastructure was compromised or malicious by design. He described the incident as significant from a data protection perspective because an AI agent was used to chain together multiple stages of the attack.

For Pérez Bes, the breach is a call for businesses to rethink how they assess and manage security risks. He said businesses need to "explicitly account for AI-assisted and AI-driven attacks when assessing the risks associated with personal-data processing," according to the TechRadar report. They also need to reassess their response times.

"Procedures designed around manually executed attacks may not be sufficient when an AI agent can analyze multiple assets at once, test different avenues of attack, and rapidly adapt its behavior based on what it finds," Pérez Bes said. He also stressed the growing importance of digital identities and credentials. An AI agent with an account or an API key can operate at machine speed and move across different services before an organization has time to detect the anomalous activity, he said.

The report did not name the Spanish company. It also said the AEPD's account is based on the notification it received, while the investigation continues. TechRadar reported the story via The Register.