AI Risk Wire

Cases · Did an AI agent act: yes · What was exposed: personal information · Added to the register (date we first published it): last 30 days

Patterns across all cases

What happenedWhat went wrongSeverityEarliest source
Self-taught hacker uses AI coding agent and autonomous penetration-testing system to breach 90+ companies and steal 8.2 million recordsmajor · earliest source 2026-10-26security breachmajor2026-10-26
BUGSTER uses DeepSeek-powered Hermes Agent to breach university MongoDB, stealing 5,200+ records
DeepSeekmoderate · earliest source 2026-10-23		security breachmoderate2026-10-23
Grok chatbot on X repeated alleged name of Cornell 'Jane Doe' in replies, amplifying doxing
xAImajor · earliest source 2026-10-18		leaked private datamajor2026-10-18
CERT-In advisory: AI agents accessed Indian organisations' systems without authorisationmoderate · earliest source 2026-10-16security breachmoderate2026-10-16
CyberXero AI-augmented initial access campaign using Claude Code and PentAGI agents
Anthropicmajor · earliest source 2026-10-12		security breachmajor2026-10-12
Meta Muse AI agent KVM escape vulnerability discovered before launch
Metamajor · earliest source 2026-10-08		security breachmajor2026-10-08
Autonomous AI agent framework (Strix/Cairn/Hermes) used to attack hundreds of online retailers and steal card datamajor · earliest source 2026-10-07security breachmajor2026-10-07
AI agent (ARTEX with Claude) used in cyberattacks targeting South Korean banks
Anthropicmajor · earliest source 2026-10-05		security breachmajor2026-10-05
AI agent breach of KB Kookmin Bank mobile work support systemmajor · earliest source 2026-10-04security breachmajor2026-10-04
Meta Muse agent disclosed Marketplace seller's home address and impersonated him to a buyer
Metamoderate · earliest source 2026-09-29		leaked private datamoderate2026-09-29
LLM pipeline deanonymizes pseudonymous Hacker News and scientist accountsmoderate · earliest source 2026-09-24leaked private datamoderate2026-09-24
AEPD-confirmed autonomous AI agent data breach (Spain)moderate · earliest source 2026-09-16security breachmoderate2026-09-16
Claude in Chrome indirect prompt injection chain: inbox exfiltration, Drive persistence and account takeover
Anthropicminor · earliest source 2026-08-05		security breachminor2026-08-05
AgentForger: CSRF via ChatGPT Workspace Agents Builder URL parameters forges attacker-controlled autonomous agent
OpenAIminor · earliest source 2026-07-23		security breachminor2026-07-23
Varonis phishing simulation drove an OpenClaw email agent to forward credentials and a customer export to an external address
Googlemoderate · earliest source 2026-06-09		security breachmoderate2026-06-09
Jailbroken Claude used to breach Mexican government networks and steal taxpayer and voter records
Anthropicmajor · earliest source 2026-03-02		security breachmajor2026-03-02
Anthropic disclosed a cybercriminal using Claude Code to automate data theft and extortion across at least 17 organizations
Anthropicmajor · earliest source 2025-08-27		security breachmajor2025-08-27

Showing 1–17 of 17. Or take the JSON.