{"schema_version":"0.10.0","id":"LR-2026-0748","record_version":1,"title":"Open-source AI agents breach 27 companies and steal 600,000 card records","verification":{"human_verified":false,"method":"automated_gate","auto_verified":true,"score":48.7,"score_breakdown":{"source_authority":12.1,"independent_corroboration":7.0,"implicated_party_confirmed":0.0,"citation_integrity":14.0,"specificity":3.0,"completeness":5.12,"unhedged_language":5.0},"checks":{"schema_valid":true,"every_field_cited":true,"quotes_verbatim":true,"source_fetched":true,"distinct_incident":true,"dates_plausible":true,"sources_agree":true,"source_describes_incident":true,"severe_backed_by_source":true,"record_integrity":true,"eligible":true,"about_this_case":true},"gate_version":"gate-2026-10-18.7","cross_check_model":null,"cross_check_agreement":null,"duplicate_of":null,"verified_by":null,"verified_at":"2026-11-01","extraction_run_id":null,"evidence_level":{"level":"preliminary","reason":"1 report: Hackread · subject to change","original_document":null,"reports_total":1,"reports_independent":1,"reports_derivative":0,"developing":false,"disputed":false,"rules_version":"evidence-2026-10-29.1","computed_at":"2026-11-01","history":[{"date":"2026-11-01","from_level":null,"to_level":"preliminary","reason":"1 report: Hackread · subject to change"}]},"sources_hash":"743921b0877d606ddaccb5220cf8a841686e5331cf17893a94ea55ed30222dcf"},"system":{"model_name":null,"model_version":null,"developer":"unknown","harness":"Strix, Cairn, and Hermes","tools_granted":[],"permissions_scope":null,"autonomy_level":"unknown","guardrails_present":[],"deployment_context":"unknown","tier":null,"lifecycle_stage":null,"integration_type":null,"intended_use":null,"safeguard_state":null,"production_intended":null},"event":{"date_occurred":null,"date_disclosed":"2026-09-23","incident_class":"security_compromise","failure_class":"data_exfiltration","agent_involved":true,"secondary_failure_classes":[],"trigger":"unknown","duration":null,"detection_method":"unknown","summary":"A financially motivated threat actor used three open-source AI harnesses, Strix, Cairn and Hermes, to run automated attacks against companies, mainly online retailers, with little manual input. Between September 10 and 15 the operator opened 105 attack projects and compromised at least 27 companies to varying degrees. The campaign resulted in more than 600,000 unexpired credit card records being exfiltrated from two companies. A Hermes skill also instructed the agent to clear payment data after card information was downloaded, and an automated cleanup routine at one victim dropped 180 tables. Researchers at Gambit Security recovered an exposed staging server that revealed the campaign. Gambit worked with the Shadowserver Foundation and industry partners to notify affected organisations and take down linked infrastructure.","tags":[],"date_detected":null,"near_miss":null,"root_cause":null,"root_cause_detail":null,"failure_class_detail":null,"responsible_party":null,"adversarial_actor":"external_attacker","input_provenance":null,"time_to_contain":null,"operations_paused":null,"remediation":null,"precursor_events":null,"primary_risk":"RK07","secondary_risks":["RK04"]},"impact":{"direct_loss_usd":null,"remediation_hours":null,"records_exposed":600000,"third_parties_affected_count":27,"severity":"major","severity_because":"Test: many third parties (a stated count of two or more affected parties). Fact: the source states at least 27 companies were compromised.","harm_class":[],"affected_description":"Companies including an online fashion retailer, a Fortune 500 hospitality company, a major US airline, and a large US industrial supplies distributor","protected_class_involved":null,"data_categories_exposed":[],"loss_range_usd":null,"reversibility":null,"downstream_exposure_count":null},"evidence":{"sources":[{"url":"https://hackread.com/open-source-ai-agents-breach-credit-card-records/","publisher":"Hackread","date":"2026-09-23","type":"press","title":"Open-Source AI Agents Breach 27 Companies, Steal 600,000 Credit Card Records - Hackread","archived_url":null,"attachment":"first_report","independence":"independent"}],"per_field_confidence":{"system.harness":"C","event.agent_involved":"C","event.failure_class":"C","event.adversarial_actor":"C","impact.records_exposed":"C","impact.third_parties_affected_count":"C","impact.affected_description":"C","context.industry":"C","event.incident_class":"D","impact.severity":"D","impact.severity_because":"D","event.primary_risk":"D","event.secondary_risks":"D","event.summary":"C","system.autonomy_level":"D","system.deployment_context":"D","event.trigger":"D","event.detection_method":"D","context.country":"D","system.developer":"D","event.date_disclosed":"D","context.denominator_available":"D"},"field_citations":{"system.harness":[{"source_index":0,"quote":"The operation relied on three open-source AI harnesses working together with minimal manual input, including Strix, Cairn, and Hermes."}],"event.agent_involved":[{"source_index":0,"quote":"A financially motivated threat actor has been using three open-source AI harnesses (tools that coordinate and run AI tasks autonomously) to conduct low-cost, automated attacks against companies, particularly online retailers."}],"event.failure_class":[{"source_index":0,"quote":"The campaign resulted in more than 600,000 unexpired credit card records being exfiltrated from two companies."}],"event.adversarial_actor":[{"source_index":0,"quote":"A financially motivated threat actor has been using three open-source AI harnesses (tools that coordinate and run AI tasks autonomously) to conduct low-cost, automated attacks against companies, particularly online retailers."}],"impact.records_exposed":[{"source_index":0,"quote":"The campaign resulted in more than 600,000 unexpired credit card records being exfiltrated from two companies."}],"impact.third_parties_affected_count":[{"source_index":0,"quote":"Between September 10 and 15, the operator initiated 105 attack projects and compromised at least 27 companies to varying degrees."}],"impact.affected_description":[{"source_index":0,"quote":"Identified targets included an online fashion retailer, a Fortune 500 hospitality company, a major US airline, and a large US industrial supplies distributor."}],"context.industry":[{"source_index":0,"quote":"A financially motivated threat actor has been using three open-source AI harnesses (tools that coordinate and run AI tasks autonomously) to conduct low-cost, automated attacks against companies, particularly online retailers."}],"event.incident_class":[{"source_index":0,"quote":"A financially motivated threat actor has been using three open-source AI harnesses (tools that coordinate and run AI tasks autonomously) to conduct low-cost, automated attacks against companies, particularly online retailers."}],"impact.severity":[{"source_index":0,"quote":"Between September 10 and 15, the operator initiated 105 attack projects and compromised at least 27 companies to varying degrees."}],"impact.severity_because":[{"source_index":0,"quote":"Between September 10 and 15, the operator initiated 105 attack projects and compromised at least 27 companies to varying degrees."}],"event.summary":[{"source_index":0,"quote":"A financially motivated threat actor has been using three open-source AI harnesses (tools that coordinate and run AI tasks autonomously) to conduct low-cost, automated attacks against companies, particularly online retailers."},{"source_index":0,"quote":"Between September 10 and 15, the operator initiated 105 attack projects and compromised at least 27 companies to varying degrees."},{"source_index":0,"quote":"The campaign resulted in more than 600,000 unexpired credit card records being exfiltrated from two companies."},{"source_index":0,"quote":"A Hermes skill titled “Database Wipe After Extraction” instructed the agent to clear payment data from Magento databases after card information was downloaded."},{"source_index":0,"quote":"At a bicycle retailer, an automated cleanup routine dropped 180 tables matching specific prefixes, including backup tables created by the victim’s administrators."},{"source_index":0,"quote":"In its research shared with Hackread.com, Gambit Security researchers recovered an exposed staging server that revealed an ongoing campaign running since July 2026."},{"source_index":0,"quote":"Gambit Security worked with the Shadowserver Foundation and other industry partners to notify affected organisations and take down infrastructure linked to the campaign."}]},"notes_on_gaps":"Single source (Hackread press report citing Gambit Security research). No developer, model name or version, or harness version is stated. Autonomy level is not stated, so it is left out. No root cause is stated. No direct financial loss is stated. The disclosure date and detection date are not stated in the body text, so they are left out; the article is dated 2026-09-23 in its header. The year for the September dates is inferred from the article date. The records figure is a lower bound ('more than'), recorded as 600000. Which two companies lost records is not stated. The country of the incident is not stated; the named targets include US companies. The filter-removal skill is described as intended, so the C5 outcome is a judgement that the bypass was attempted, not confirmed as successful. The failure class data_exfiltration and the secondary credential_misuse are judgements from the described actions. The 180-table cleanup was an automated routine, not stated as agent-driven. The source spells the firm 'Gamnit' once; 'Gambit' is used here. Remediations are not recorded because the takedown and notifications are not stated as changes to controls. [case created by the backfill: read by claude-haiku-5-5, backfill-2026-11-01.2, 2026-11-01; not yet reviewed] [2026-11-01: evidence level set: Preliminary (1 report: Hackread · subject to change)]"},"context":{"industry":"online retail","org_size_band":null,"country":"unknown","denominator_available":false,"denominator":null,"related_incident_ids":[],"systemic_exposure":null,"shared_model_id":null,"upstream_incident_id":null,"incident_evidence":null,"regulatory":null,"coverage":null},"analysis":{"sections":{"timeline":[{"text":"Operator initiated 105 attack projects and compromised at least 27 companies.","quote":"Between September 10 and 15, the operator initiated 105 attack projects and compromised at least 27 companies to varying degrees.","source_index":0,"when":"September 10 and 15"}]},"model":"claude-haiku-5-5","prompt_version":"backfill-2026-11-01.2","extracted_at":"2026-11-01","source_urls":["https://hackread.com/open-source-ai-agents-breach-credit-card-records/"]}}