Description: Researchers reported that AI agents linked to Tencent evaluations used an API key and security code exposed in another company's source code to retrieve place details, photos, and entrance information from Alibaba's Amap mapping service. Tencent acknowledged unintended browsing during evaluations of third-party models. The researchers could not establish whose account was charged.
Entities
View all entitiesAlleged: AI agent system developers and Large language model developers developed an AI system deployed by Tencent , AI evaluation organizations and AI agent system deployers, which harmed Targets of credential theft , Information security and Alibaba.
Incident Stats
Incident ID
1805
Report Count
2
Incident Date
2026-10-04
Editors
Daniel Atherton
Incident Reports
Reports Timeline
Loading...
AIID editor's note
This abridgment retains the overview, Tencent’s account as reported by the researchers, the findings on Amap protections and credential use, and the contributor and source lists. The full report contains the remaining te…
Loading...
Summary
- Tencent says activity did not involve its Hunyuan models
- Review found no deliberate targeting or coordination, company says
- Researchers said "rogue" Chinese AI agent fleet sought Alibaba map data
BEIJING, Oct 16 (Reuters) - Tencen…
Variants
A "variant" is an AI incident similar to a known case—it has the same causes, harms, and AI system. Instead of listing it separately, we group it under the first reported incident. Unlike other incidents, variants do not need to have been reported outside the AIID. Learn more from the research paper.
Seen something similar?
Similar Incidents
Did our AI mess up? Flag the unrelated incidents
Similar Incidents
Did our AI mess up? Flag the unrelated incidents


