{"schema_version":"0.10.0","id":"LR-2026-0754","record_version":1,"title":"Chinese state-linked hacker groups used AI agents on compromised networks, per Google report","verification":{"human_verified":false,"method":"automated_gate","auto_verified":true,"score":42.5,"score_breakdown":{"source_authority":12.1,"independent_corroboration":7.0,"implicated_party_confirmed":0.0,"citation_integrity":14.0,"specificity":0.0,"completeness":2.24,"unhedged_language":5.0},"checks":{"schema_valid":true,"every_field_cited":true,"quotes_verbatim":true,"source_fetched":true,"distinct_incident":true,"dates_plausible":true,"sources_agree":true,"source_describes_incident":true,"severe_backed_by_source":true,"record_integrity":true,"eligible":true,"about_this_case":true},"gate_version":"gate-2026-10-18.7","cross_check_model":null,"cross_check_agreement":null,"duplicate_of":null,"verified_by":null,"verified_at":"2026-11-01","extraction_run_id":null,"evidence_level":{"level":"preliminary","reason":"1 report: NBC News · subject to change","original_document":null,"reports_total":1,"reports_independent":1,"reports_derivative":0,"developing":false,"disputed":false,"rules_version":"evidence-2026-10-29.1","computed_at":"2026-11-01","history":[{"date":"2026-11-01","from_level":null,"to_level":"preliminary","reason":"1 report: NBC News · subject to change"}]},"sources_hash":"18e1f5b1a15fa129bab8ca4a5bd1cf7d00d7f217b7f239331b0d7119ebed99db"},"system":{"model_name":null,"model_version":null,"developer":"unknown","harness":null,"tools_granted":[],"permissions_scope":null,"autonomy_level":"unknown","guardrails_present":[],"deployment_context":"unknown","tier":null,"lifecycle_stage":null,"integration_type":null,"intended_use":null,"safeguard_state":null,"production_intended":null},"event":{"date_occurred":null,"date_disclosed":"2026-09-08","incident_class":"security_compromise","failure_class":null,"agent_involved":true,"secondary_failure_classes":[],"trigger":"unknown","duration":null,"detection_method":"third_party","summary":"Google’s Threat Intelligence Group reported that hacker groups, including Chinese intelligence agencies and cybercrime gangs, have moved from basic AI prompting to AI agents that automate much of their intrusions. One Chinese group tracked since 2023 has focused on academic, medical and military research organisations in North America, including proprietary AI research. Google said the group compromised unrelated victims’ cloud networks and installed open-source AI models, which let it query models without leaving a trail through commercial products. Google said running those models on hacked third-party systems allowed the hackers to avoid monitoring and bypass guardrails. Google did not name any victims and said it had not seen fully automated hacking campaigns. The Chinese Embassy in Washington denied the claims. The findings were published in Google’s latest quarterly report.","tags":[],"date_detected":null,"near_miss":null,"root_cause":null,"root_cause_detail":null,"failure_class_detail":null,"responsible_party":null,"adversarial_actor":null,"input_provenance":null,"time_to_contain":null,"operations_paused":null,"remediation":null,"precursor_events":null},"impact":{"direct_loss_usd":null,"remediation_hours":null,"records_exposed":null,"third_parties_affected_count":null,"severity":"moderate","harm_class":[],"affected_description":null,"protected_class_involved":null,"data_categories_exposed":[],"loss_range_usd":null,"reversibility":null,"downstream_exposure_count":null},"evidence":{"sources":[{"url":"https://www.nbcnews.com/tech/security/chinese-hackers-are-running-ai-stolen-networks-avoid-detection-google-rcna596155","publisher":"NBC News","date":"2026-09-08","type":"press","title":"Chinese hackers are running AI on stolen networks to avoid detection, Google says - NBC News","archived_url":null,"attachment":"first_report","independence":"independent"}],"per_field_confidence":{"event.agent_involved":"C","event.incident_class":"C","event.detection_method":"C","impact.severity":"D","event.summary":"C","system.autonomy_level":"D","system.deployment_context":"D","event.trigger":"D","context.country":"D","system.developer":"D","event.date_disclosed":"D","context.denominator_available":"D"},"field_citations":{"event.agent_involved":[{"source_index":0,"quote":"In its latest quarterly report, Google’s Threat Intelligence Group said that several hacker groups, including both intelligence agencies and cybercrime gangs, have moved from basic AI prompting to using AI agents that automate wide swaths of their intrusion."}],"event.incident_class":[{"source_index":0,"quote":"Hackers working for Chinese intelligence are increasingly targeting American AI research and using AI in their operations, Google said Tuesday."}],"event.detection_method":[{"source_index":0,"quote":"Google said it had observed the hacker group compromising unrelated victims’ cloud networks and installing open-source AI models — a way to query models without leaving a trail via commercial AI products."}],"impact.severity":[{"source_index":0,"quote":"Google said it had observed the hacker group compromising unrelated victims’ cloud networks and installing open-source AI models — a way to query models without leaving a trail via commercial AI products."}],"event.summary":[{"source_index":0,"quote":"In its latest quarterly report, Google’s Threat Intelligence Group said that several hacker groups, including both intelligence agencies and cybercrime gangs, have moved from basic AI prompting to using AI agents that automate wide swaths of their intrusion."},{"source_index":0,"quote":"Google said that one Chinese group in particular, which it has tracked since 2023, has relentlessly focused on academic, medical and military research organizations in North America and has specifically gone after proprietary AI research."},{"source_index":0,"quote":"Google said it had observed the hacker group compromising unrelated victims’ cloud networks and installing open-source AI models — a way to query models without leaving a trail via commercial AI products."},{"source_index":0,"quote":"running those models on a hacked third-party system allows hackers to avoid monitoring and bypass guardrails that might stop a more popular commercial chatbot from helping with a hacking campaign."},{"source_index":0,"quote":"Google did not name any of the victims."},{"source_index":0,"quote":"Google says it has not seen threat actors wage fully automated hacking campaigns but that instead, hacking groups are continuing to layer on more AI into their operations."},{"source_index":0,"quote":"Liu Chang, spokesperson for the Chinese Embassy in Washington, broadly denied the claims."}]},"notes_on_gaps":"The sources do not state the date the activity occurred, the number of victims, the identity of the victims, the specific AI models or agent tools used, or how the intrusions were first detected. Only one source (NBC News, citing Google's quarterly report) was provided, so the account is a press report of a threat intelligence finding. The disclosure date 2026-09-08 is taken from the article header; the quote Google said Tuesday supports it as a Tuesday publication. The AI agents here are the attackers' tools, not a failing deployed system, so no failure_class was assigned and no system fields were filled. Judgement: agent_involved set true because the source says hackers use AI agents to automate intrusions. Judgement: severity moderate because third-party systems were touched and the targeting is described as North American academic, medical and military research organisations, but no count was stated. Country and industry were left out because the sources do not state the incident's location in a usable form. The OpenAI and Anthropic sandbox escapes mentioned in the source are other incidents and were excluded. No remediations were reported. The Chinese Embassy denied the claims, which is recorded in the summary but not verified. [case created by the backfill: read by claude-haiku-5-5, backfill-2026-11-01.2, 2026-11-01; not yet reviewed] [2026-11-01: evidence level set: Preliminary (1 report: NBC News · subject to change)]"},"context":{"industry":null,"org_size_band":null,"country":"unknown","denominator_available":false,"denominator":null,"related_incident_ids":[],"systemic_exposure":null,"shared_model_id":null,"upstream_incident_id":null,"incident_evidence":null,"regulatory":null,"coverage":null},"narrative":{"steps":[{"step":"doing","text":"Several hacker groups, including intelligence agencies and cybercrime gangs, moved from basic AI prompting to AI agents that automate much of their intrusions.","quote":"In its latest quarterly report, Google’s Threat Intelligence Group said that several hacker groups, including both intelligence agencies and cybercrime gangs, have moved from basic AI prompting to using AI agents that automate wide swaths of their intrusion.","source_index":0,"grade":"C"},{"step":"reached","text":"One group compromised unrelated victims’ cloud networks and installed open-source AI models on them.","quote":"Google said it had observed the hacker group compromising unrelated victims’ cloud networks and installing open-source AI models — a way to query models without leaving a trail via commercial AI products.","source_index":0,"grade":"C"},{"step":"caught","text":"Google’s Threat Intelligence Group observed the activity and reported it in its quarterly report.","quote":"Google said it had observed the hacker group compromising unrelated victims’ cloud networks and installing open-source AI models — a way to query models without leaving a trail via commercial AI products.","source_index":0,"grade":"C"}],"model":"claude-haiku-5-5","prompt_version":"backfill-2026-11-01.2","extracted_at":"2026-11-01","source_urls":["https://www.nbcnews.com/tech/security/chinese-hackers-are-running-ai-stolen-networks-avoid-detection-google-rcna596155"]},"analysis":{"sections":{"timeline":[{"text":"Google began tracking one Chinese group, which later focused on North American research organisations.","quote":"Google said that one Chinese group in particular, which it has tracked since 2023, has relentlessly focused on academic, medical and military research organizations in North America and has specifically gone after proprietary AI research.","source_index":0,"when":"2023"}]},"model":"claude-haiku-5-5","prompt_version":"backfill-2026-11-01.2","extracted_at":"2026-11-01","source_urls":["https://www.nbcnews.com/tech/security/chinese-hackers-are-running-ai-stolen-networks-avoid-detection-google-rcna596155"]}}