Spain’s data protection watchdog said it has received the first reported notification of a personal data breach allegedly carried out by an artificial intelligence agent, a case that suggests autonomous ​systems are beginning to play a direct role in cyberattacks. The Spanish Data Protection Agency (AEPD) ‌said on Monday in a blog on its website that the incident involved an AI agent using a widely known large language model to identify vulnerabilities, gain access to a system and subsequently modify personal data and access ​invoices. The agency said that the alleged breach was reported to it by the affected organization ​and the information remains under review, adding the use of a particular AI ⁠model did not mean either the model itself or its provider’s infrastructure was compromised, nor that ​the technology was developed for malicious purposes.

Full report : Spanish data watchdog publicises first AI agent-linked data breach report.