{"schema_version":"0.10.0","id":"LR-2026-0795","record_version":1,"title":"Chat agent socially engineered into revealing a long-lived OAuth token; CRM data of more than 700 companies reportedly at risk","verification":{"human_verified":false,"method":"automated_gate","auto_verified":true,"score":43.5,"score_breakdown":{"source_authority":12.1,"independent_corroboration":7.0,"implicated_party_confirmed":0.0,"citation_integrity":14.0,"specificity":0.0,"completeness":3.2,"unhedged_language":5.0},"checks":{"schema_valid":true,"every_field_cited":true,"quotes_verbatim":true,"source_fetched":true,"distinct_incident":true,"dates_plausible":true,"sources_agree":true,"source_describes_incident":true,"severe_backed_by_source":true,"record_integrity":true,"eligible":true,"about_this_case":true},"gate_version":"gate-2026-10-18.7","cross_check_model":null,"cross_check_agreement":null,"duplicate_of":null,"verified_by":null,"verified_at":"2026-11-01","extraction_run_id":null,"evidence_level":{"level":"preliminary","reason":"Only a republished copy: BigGo Finance · subject to change","original_document":null,"reports_total":1,"reports_independent":0,"reports_derivative":1,"developing":true,"disputed":false,"rules_version":"evidence-2026-10-29.1","computed_at":"2026-11-01","history":[{"date":"2026-11-01","from_level":null,"to_level":"preliminary","reason":"Only a republished copy: BigGo Finance · subject to change"}]},"sources_hash":"1852a9eaaa781307ca6eb8fc3019091602c8c7d17c8ff7593949814db7593dd0"},"system":{"model_name":null,"model_version":null,"developer":"unknown","harness":null,"tools_granted":[],"permissions_scope":null,"autonomy_level":"unknown","guardrails_present":[],"deployment_context":"unknown","tier":null,"lifecycle_stage":null,"integration_type":null,"intended_use":null,"safeguard_state":null,"production_intended":null},"event":{"date_occurred":null,"date_disclosed":"2026-10-23","incident_class":"security_compromise","failure_class":"credential_misuse","agent_involved":true,"secondary_failure_classes":[],"trigger":"credential_exposure","duration":null,"detection_method":"unknown","summary":"According to a press account of a talk by Bloomberg security practitioner Andrey Rybka, attackers social-engineered a chat agent into revealing a long-lived OAuth token. They then asked whether the agent could export CRM data, and it could. The token opened the door to more than 700 companies. The account is secondhand, names no organisation, gives no date, and does not say how the activity was detected or contained. The remedy it proposes is short-lived, audience-bound tokens, one identity per agent, tightly scoped, with an audit trail.","tags":[],"date_detected":null,"near_miss":null,"root_cause":null,"root_cause_detail":null,"failure_class_detail":null,"responsible_party":null,"adversarial_actor":"external_attacker","input_provenance":null,"time_to_contain":null,"operations_paused":null,"remediation":null,"precursor_events":null},"impact":{"direct_loss_usd":null,"remediation_hours":null,"records_exposed":null,"third_parties_affected_count":null,"severity":"major","severity_because":"Test applied: many third parties, a stated count of two or more affected parties. Fact: the token opened the door to more than 700 companies.","harm_class":[],"affected_description":null,"protected_class_involved":null,"data_categories_exposed":[],"loss_range_usd":null,"reversibility":null,"downstream_exposure_count":null},"evidence":{"sources":[{"url":"https://finance.biggo.com/news/6fc5e7f4d66b2825","publisher":"BigGo Finance","date":"2026-10-23","type":"press","title":"Bloomberg's Andrey Rybka on AI Agent Breaches: 700 Companies' CRM Data Stolen Through One Token - BigGo Finance","archived_url":null,"attachment":"first_report","independence":"derivative"}],"per_field_confidence":{"event.agent_involved":"C","event.failure_class":"C","event.trigger":"C","event.adversarial_actor":"C","event.incident_class":"D","impact.severity":"D","impact.severity_because":"D","event.summary":"C","system.autonomy_level":"D","system.deployment_context":"D","event.detection_method":"D","context.country":"D","system.developer":"D","event.date_disclosed":"D","context.denominator_available":"D"},"field_citations":{"event.agent_involved":[{"source_index":0,"quote":"Attackers social-engineered a chat agent into revealing a long-lived OAuth token, then asked whether it could export CRM data."}],"event.failure_class":[{"source_index":0,"quote":"Attackers social-engineered a chat agent into revealing a long-lived OAuth token, then asked whether it could export CRM data."}],"event.trigger":[{"source_index":0,"quote":"Attackers social-engineered a chat agent into revealing a long-lived OAuth token, then asked whether it could export CRM data."}],"event.adversarial_actor":[{"source_index":0,"quote":"Attackers social-engineered a chat agent into revealing a long-lived OAuth token, then asked whether it could export CRM data."}],"event.incident_class":[{"source_index":0,"quote":"Attackers social-engineered a chat agent into revealing a long-lived OAuth token, then asked whether it could export CRM data."}],"impact.severity":[{"source_index":0,"quote":"The token opened the door to more than 700 companies."}],"impact.severity_because":[{"source_index":0,"quote":"The token opened the door to more than 700 companies."}],"event.summary":[{"source_index":0,"quote":"Attackers social-engineered a chat agent into revealing a long-lived OAuth token, then asked whether it could export CRM data."},{"source_index":0,"quote":"The token opened the door to more than 700 companies."},{"source_index":0,"quote":"The fix is short-lived, audience-bound tokens, one identity per agent, tightly scoped, with an audit trail."}]},"notes_on_gaps":"Only one source: a secondhand press account of an unnamed incident recounted from a podcast talk. No organisation, model, vendor, harness, date of occurrence, date of disclosure, detection method, containment or remediation by the affected party is stated. The source says the token opened access to more than 700 companies; the exact count is not recorded as an integer because the source states only a lower bound. The headline's word 'stolen' is not confirmed in the body, which says only that the token opened the door. Judgements made: failure_class credential_misuse and trigger credential_exposure, because the source says the agent revealed the token; severity major on the stated count of more than two affected parties; root_cause left unknown because no category is stated; the controls A3 and A4 outcomes are inferred from the described long-lived token and disclosure; the publication date 2026-10-23 is not used as an event date; the remediation is advice from the speaker, not a change reported by a party. [case created by the backfill: read by claude-haiku-5-5, backfill-2026-11-01.2, 2026-11-01; not yet reviewed] [2026-11-01: evidence level set: Preliminary (Only a republished copy: BigGo Finance · subject to change)]"},"context":{"industry":null,"org_size_band":null,"country":"unknown","denominator_available":false,"denominator":null,"related_incident_ids":[],"systemic_exposure":null,"shared_model_id":null,"upstream_incident_id":null,"incident_evidence":null,"regulatory":null,"coverage":null},"narrative":{"steps":[{"step":"went_wrong","text":"The agent revealed a long-lived OAuth token.","quote":"Attackers social-engineered a chat agent into revealing a long-lived OAuth token, then asked whether it could export CRM data.","source_index":0,"grade":"C"}],"model":"claude-haiku-5-5","prompt_version":"backfill-2026-11-01.2","extracted_at":"2026-11-01","source_urls":["https://finance.biggo.com/news/6fc5e7f4d66b2825"]},"analysis":{"sections":{"timeline":[{"text":"Attackers social-engineered a chat agent into revealing a long-lived OAuth token, then asked whether it could export CRM data.","quote":"Attackers social-engineered a chat agent into revealing a long-lived OAuth token, then asked whether it could export CRM data.","source_index":0,"when":null}]},"model":"claude-haiku-5-5","prompt_version":"backfill-2026-11-01.2","extracted_at":"2026-11-01","source_urls":["https://finance.biggo.com/news/6fc5e7f4d66b2825"]}}