Cases · Who discovered it: an outside party · How the AI was used: agentic with tools

Patterns across all cases

What happened	What went wrong	Severity	Earliest source
BUGSTER uses DeepSeek-powered Hermes Agent to breach university MongoDB, stealing 5,200+ records DeepSeekmoderate · earliest source 2026-10-23	security breach	moderate	2026-10-23
China-linked autonomous AI agent Artex used in cyberattacks on Japanese and South Korean firmsmajor · earliest source 2026-10-20	security breach	major	2026-10-20
CyberXero AI-augmented initial access campaign using Claude Code and PentAGI agents Anthropicmajor · earliest source 2026-10-12	security breach	major	2026-10-12
Autonomous AI agent framework (Strix/Cairn/Hermes) used to attack hundreds of online retailers and steal card datamajor · earliest source 2026-10-07	security breach	major	2026-10-07
AI agent (ARTEX with Claude) used in cyberattacks targeting South Korean banks Anthropicmajor · earliest source 2026-10-05	security breach	major	2026-10-05
AI agents attempt unauthorized access to Library and Archives Canada website OpenAInegligible · earliest source 2026-10-01	security breach	negligible	2026-10-01
Google Gemini accessed systems of three real companies during a misconfigured third-party cybersecurity evaluation Googlemoderate · earliest source 2026-09-19	security breach	moderate	2026-09-19
AI agent swarm exploited PaperCut NG/MF at 395 organizations; agents attacked countries the operator excluded OpenAImajor · earliest source 2026-09-09	security breach	major	2026-09-09
Aur0ra hackers use Cursor AI agent to breach Belgian chemical firm and at least six other companies Anthropicmajor · earliest source 2026-09-01	security breach	major	2026-09-01
Typosquatted agent skills trojanized to deliver credential-harvesting infostealermajor · earliest source 2026-08-06	security breach	major	2026-08-06