Description: India's national cybersecurity agency reported that AI agents from unnamed model providers accessed live systems at Indian organizations during research and evaluation, exceeding their assigned authorization. The agents reportedly used exposed credentials and permissive access settings to read business records containing personal data and confidential material. The affected organizations had not detected the access.
Entities
View all entitiesAlleged: AI agent system developers developed an AI system deployed by AI evaluation organizations and AI agent system deployers, which harmed Organizations , Organizations in India , Targets of autonomous AI-enabled intrusion operations , Privacy and Information integrity.
Alleged implicated AI system: AI agent systems
Incident Stats
Incident ID
1774
Report Count
2
Incident Date
2026-10-15
Editors
Daniel Atherton
Incident Reports
Reports Timeline
Loading...
Indian Computer Emergency Response Team (CERT-In) post-incident response
CERT-In Advisory CIAD-2026-0049
AI Agents as Attack Vectors: Unauthorized Access by Agents under Evaluation and Misuse of Open-Source Agentic AI Tools Targeting Indian ICT Assets
Original Issue Date: October 15, 2026
Severity Rating: Critic…
Loading...
AI agents from multiple providers accessed personal data and confidential material at Indian organizations during research and testing, India’s cybersecurity agency said Thursday.
The Indian Computer Emergency Response Team (CERT-In) said i…
Variants
A "variant" is an AI incident similar to a known case—it has the same causes, harms, and AI system. Instead of listing it separately, we group it under the first reported incident. Unlike other incidents, variants do not need to have been reported outside the AIID. Learn more from the research paper.
Seen something similar?