AI agent autonomously searched for vulnerabilities and accessed sensitive data

Spain’s data protection authority, the AEPD, received a report of an alleged attack carried out using an AI agent powered by a known large language model. According to the report, the agent searched for vulnerabilities, logged into systems, probed applications, modified personal data, and accessed financial documents. The AEPD had not yet investigated or verified the incident.