Organization affected by AI-agent data breach reported to AEPD

影響を受けたインシデント

インシデント 16934 Report
AI Agent Reportedly Exploited Application Vulnerabilities to Modify Personal Data and Access Invoices in Breach Reported to Spanish Data Protection Authority

2026-09-14

An unnamed organization reportedly notified Spain's data protection authority that a third party used an AI agent powered by a known language model to carry out a multistep intrusion that resulted in unauthorized changes to personal data and access to invoices. The AEPD said the case remains under review and has not identified the organization, attacker, AI system, attack date, or number of affected people.

Related Entities

Threat actors

Incidents involved as Deployer

インシデント 1693
4 レポート
AI Agent Reportedly Exploited Application Vulnerabilities to Modify Personal Data and Access Invoices in Breach Reported to Spanish Data Protection Authority

Cybercriminals

Incidents involved as Deployer

インシデント 1693
4 レポート
AI Agent Reportedly Exploited Application Vulnerabilities to Modify Personal Data and Access Invoices in Breach Reported to Spanish Data Protection Authority

AI agent system deployers

Incidents involved as Deployer

インシデント 1693
4 レポート
AI Agent Reportedly Exploited Application Vulnerabilities to Modify Personal Data and Access Invoices in Breach Reported to Spanish Data Protection Authority

Agentic threat actors

Incidents involved as Deployer

インシデント 1693
4 レポート
AI Agent Reportedly Exploited Application Vulnerabilities to Modify Personal Data and Access Invoices in Breach Reported to Spanish Data Protection Authority

Large language model developers

Incidents involved as Developer

インシデント 1693
4 レポート
AI Agent Reportedly Exploited Application Vulnerabilities to Modify Personal Data and Access Invoices in Breach Reported to Spanish Data Protection Authority

AI agent system developers

Incidents involved as Developer

インシデント 1693
4 レポート
AI Agent Reportedly Exploited Application Vulnerabilities to Modify Personal Data and Access Invoices in Breach Reported to Spanish Data Protection Authority

Victims of automated cybercrime

影響を受けたインシデント

インシデント 1693
4 レポート
AI Agent Reportedly Exploited Application Vulnerabilities to Modify Personal Data and Access Invoices in Breach Reported to Spanish Data Protection Authority

Privacy

影響を受けたインシデント

インシデント 1693
4 レポート
AI Agent Reportedly Exploited Application Vulnerabilities to Modify Personal Data and Access Invoices in Breach Reported to Spanish Data Protection Authority

Organizations

影響を受けたインシデント

インシデント 1693
4 レポート
AI Agent Reportedly Exploited Application Vulnerabilities to Modify Personal Data and Access Invoices in Breach Reported to Spanish Data Protection Authority

Information security

影響を受けたインシデント

インシデント 1693
4 レポート
AI Agent Reportedly Exploited Application Vulnerabilities to Modify Personal Data and Access Invoices in Breach Reported to Spanish Data Protection Authority

Enterprise IT systems

影響を受けたインシデント

インシデント 1693
4 レポート
AI Agent Reportedly Exploited Application Vulnerabilities to Modify Personal Data and Access Invoices in Breach Reported to Spanish Data Protection Authority

Large language models

Incidents implicated systems

インシデント 1693
4 レポート
AI Agent Reportedly Exploited Application Vulnerabilities to Modify Personal Data and Access Invoices in Breach Reported to Spanish Data Protection Authority

AI agent systems

Incidents implicated systems

インシデント 1693
4 レポート
AI Agent Reportedly Exploited Application Vulnerabilities to Modify Personal Data and Access Invoices in Breach Reported to Spanish Data Protection Authority