| Self-taught hacker uses AI coding agent and autonomous penetration-testing system to breach 90+ companies and steal 8.2 million recordsmajor · earliest source 2026-10-26 | security breach | major | 2026-10-26 |
302.ai public Azure bucket exposed 17.6 million files including 144,000 AI chat logs Univerads Technology Limitedmajor · earliest source 2026-10-23 | leaked private data | major | 2026-10-23 |
BUGSTER uses DeepSeek-powered Hermes Agent to breach university MongoDB, stealing 5,200+ records DeepSeekmoderate · earliest source 2026-10-23 | security breach | moderate | 2026-10-23 |
Grok chatbot on X repeated alleged name of Cornell 'Jane Doe' in replies, amplifying doxing xAImajor · earliest source 2026-10-18 | leaked private data | major | 2026-10-18 |
Character.AI chatbots promoted as therapists/psychologists; states cite 2024 wrongful-death suit and privacy concerns in bankruptcy filing Character.AImajor · earliest source 2026-10-17 | produced harmful content | major | 2026-10-17 older event |
| CERT-In advisory: AI agents accessed Indian organisations' systems without authorisationmoderate · earliest source 2026-10-16 | security breach | moderate | 2026-10-16 |
CyberXero AI-augmented initial access campaign using Claude Code and PentAGI agents Anthropicmajor · earliest source 2026-10-12 | security breach | major | 2026-10-12 |
Meta Muse AI agent KVM escape vulnerability discovered before launch Metamajor · earliest source 2026-10-08 | security breach | major | 2026-10-08 |
| Autonomous AI agent framework (Strix/Cairn/Hermes) used to attack hundreds of online retailers and steal card datamajor · earliest source 2026-10-07 | security breach | major | 2026-10-07 |
AI agent (ARTEX with Claude) used in cyberattacks targeting South Korean banks Anthropicmajor · earliest source 2026-10-05 | security breach | major | 2026-10-05 |
| Shinhan Bank data breach with suspected AI-assisted intrusionmoderate · earliest source 2026-10-05 | security breach | moderate | 2026-10-05 |
| AI agent breach of KB Kookmin Bank mobile work support systemmajor · earliest source 2026-10-04 | security breach | major | 2026-10-04 |
| Bee Cheng Hiang mass marketing e-mail exposes 95,000 customer addresses after AI-generated code omitted recipient hidingmoderate · earliest source 2026-09-30 | leaked private data | moderate | 2026-09-30 |
| AI-generated sexually explicit deepfake smear campaign against Porsche sales consultant Mu Qianwenmoderate · earliest source 2026-09-30 | produced harmful content | moderate | 2026-09-30 |
Meta Muse agent disclosed Marketplace seller's home address and impersonated him to a buyer Metamoderate · earliest source 2026-09-29 | leaked private data | moderate | 2026-09-29 |
| LLM pipeline deanonymizes pseudonymous Hacker News and scientist accountsmoderate · earliest source 2026-09-24 | leaked private data | moderate | 2026-09-24 |
| AEPD-confirmed autonomous AI agent data breach (Spain)moderate · earliest source 2026-09-16 | security breach | moderate | 2026-09-16 |
Claude in Chrome indirect prompt injection chain: inbox exfiltration, Drive persistence and account takeover Anthropicminor · earliest source 2026-08-05 | security breach | minor | 2026-08-05 |
AgentForger: CSRF via ChatGPT Workspace Agents Builder URL parameters forges attacker-controlled autonomous agent OpenAIminor · earliest source 2026-07-23 | security breach | minor | 2026-07-23 |
Varonis phishing simulation drove an OpenClaw email agent to forward credentials and a customer export to an external address Googlemoderate · earliest source 2026-06-09 | security breach | moderate | 2026-06-09 |
Jailbroken Claude used to breach Mexican government networks and steal taxpayer and voter records Anthropicmajor · earliest source 2026-03-02 | security breach | major | 2026-03-02 |
Anthropic disclosed a cybercriminal using Claude Code to automate data theft and extortion across at least 17 organizations Anthropicmajor · earliest source 2025-08-27 | security breach | major | 2025-08-27 |