AI agent executes first reported data breach in Spain
Spain's data protection authority received the first reported notification of a personal data breach executed by an autonomous AI agent. The agent reportedly used a known language model to find vulnerabilities, log in to an application, and modify personal data and access third-party invoices.
What happened
The Agencia Española de Protección de Datos (AEPD) received a notification of a personal data breach reportedly executed by an autonomous AI agent connected to a known language model. A third party used the agent to chain together multiple phases of an attack against an organization's systems.
The AI agent searched for vulnerabilities in generic files, successfully logged into an application, autonomously explored the application for additional security flaws, and after identifying a vulnerability, modified personal data and accessed third-party invoices.
Reported impact
Personal data was modified and third-party invoices were accessed. The exact scope of the breach, including the number of affected persons and specific information exposed, has not been disclosed.
Index analysis
The AEPD emphasized that AI is not creating entirely new threats but increasing the speed, scale, and adaptability of known attack techniques while reducing the margin for detection and containment. An AI agent can receive an objective, plan intermediate tasks, use tools, execute code, consult sources, interpret results, and adapt its actions based on findings.
This is the first incident of this type officially notified to the Spanish authority. The AEPD clarified that the use of a particular language model does not imply that the model or its provider's infrastructure were compromised, nor that the tool was created for malicious purposes.
Governance controls
The AEPD stated that the affected organization submitted the notification and that AI automation must be incorporated into organizational risk analyses to accelerate response capabilities to such incidents.
Classification
Sources and evidence
This record was researched and written by the Index, based on the following original reporting.