Cases › security breach › LR-2026-0133
Autonomous AI agent framework (Strix/Cairn/Hermes) used to attack hundreds of online retailers and steal card data
Severity major: Gambit Security has confirmed that over 600,000 valid credit card details were stolen from just two companies.
Earliest source we hold 2026-10-07
Autonomous AI agents (Strix, Cairn, Hermes) were used by attackers to scan and compromise hundreds of online retail sites, stealing over 600,000 credit card details and installing payment skimmers. Gambit Security detected the campaign through leaked data, attacker tools, and website skimmers. The source notes the actual scale may be larger.
Risk grouping: AI used to exploit
| Who caused it | A person or organisation “In the system confirmed this time, a human selects the target and provides a simple objective, while the AI continues trial and error for extended periods.” source |
|---|---|
| Intended or not | Intended “The targets were not chosen randomly. The attackers extracted shopping sites from website access ranking services, excluded sites using major e-commerce platforms, and then focused on stores using custom-developed systems that were likely to have unknown vulnerabilities or configuration flaws.” source |
| Before or after release | After release “Strix alone was executed 146 times on 138 hosts between August 23rd and 31st, 2026, running multiple scans in parallel and completing a total of 633 hours of processing in just 195 hours.” source |
| The AI's part | Used as a tool “Cairn, given objectives such as 'gaining administrator privileges' and 'making it possible to execute code on the server,' would autonomously continue the attack for several hours, trying various intrusion methods.” source |
The story
1 · What it was doingAutonomous AI agents (Strix, Cairn, Hermes) were used by attackers to scan and exploit online retail websites, with tools for vulnerability scanning, code execution, and data access.
2 · What went wrongThe agents compromised websites, stole credit card data, and installed skimmers, breaching security boundaries of the targeted companies.
3 · What it reached or didOver 600,000 credit card details from two companies, at least 27 companies compromised, and more than 100 sites infected with skimmers.
4 · How it was caughtGambit Security detected the campaign through leaked data, attacker tools, and website skimmers.
5 · What was doneThe source notes the actual scale may be larger.
What the sources state
- Records exposed 617,938
Others like this
Autonomous AI agent campaign (AIA0001) compromises 100+ company websites via Cairn platform 2026-10-20
BUGSTER uses DeepSeek-powered Hermes Agent to breach university MongoDB, stealing 5,200+ records 2026-10-23
Show every field, with its source and grade
The AI system
Software around the model
Strix, Cairn, Hermes
C one secondary source states it
Tools it was given
vulnerability scanning, exploitation, code execution, credential access, database access, file upload, cloud storage write
D inferred by us from the described behaviour, reason shown
How much it acted alone
it acted alone, watched by a person
D inferred by us from the described behaviour, reason shown
Stage of the model
in live use
D inferred by us from the described behaviour, reason shown
How it was connected
agentic with tools
D inferred by us from the described behaviour, reason shown
What it was for
Autonomous penetration testing and exploitation of online retail websites
C one secondary source states it
What happened
Earliest source we hold
2026-10-07
A the date the source itself carries
Who caught it
an outside party
D inferred by us from the described behaviour, reason shown
Themes
autonomous agents, cyberattack, credit card theft, skimmers, Japan
D inferred by us from the described behaviour, reason shown
Who caused it
an outside attacker
D inferred by us from the described behaviour, reason shown
What went wrong
security breach
D inferred by us from the described behaviour, reason shown
AI agent
an AI agent acted
C one secondary source states it
Impact
Records exposed
617,938
C one secondary source states it
Severity
major
D inferred by us from the described behaviour, reason shown
Who was affected
over 600,000 valid credit card details stolen from just two companies; at least 27 companies compromised; more than 100 sites infected with skimmers
C one secondary source states it
Kinds of data exposed
credit card numbers, credentials, personal information
D inferred by us from the described behaviour, reason shown
Why this severity
Gambit Security has confirmed that over 600,000 valid credit card details were stolen from just two companies.
D inferred by us from the described behaviour, reason shown
Context
Industry
Retail
D inferred by us from the described behaviour, reason shown
Country
Japan
C one secondary source states it
Base count
138 units, 2026-08-23 to 2026-08-31
C one secondary source states it
LR-2026-0133 · version 5 · published 2026-10-25 after automatic checks; not yet checked field by field by a person · changes to this case · JSON