Spain’s data protection authority (AEPD) has received what it calls the first confirmed notification of a data breach carried out by an autonomous AI agent. The unnamed organization reported that an agent powered by a large language model searched for vulnerabilities in its systems, successfully logged in, then continued probing applications for additional weaknesses. In the final phase, the agent modified personal data and accessed invoice records.
The AEPD says it has not yet independently verified all details of the incident, but is treating the notification as a landmark signal: AI-assisted attacks are no longer theoretical. “The attacking agent began searching for vulnerabilities in generic files and successfully logged in,” the agency wrote. “Once it gained access to the system, it began autonomously searching for vulnerabilities in the application. After finding them, it was able to modify personal data and access invoices.” The agency stressed that AI does not introduce fundamentally new attack categories, but it dramatically increases the speed, scale, and adaptability of attacks, and compresses the time defenders have to respond. A manual attacker that sequentially tests access points and pivots through an application can take hours or days; an agent doing the same work runs at machine speed.
The AEPD used the incident to push organizations to treat AI-powered attacks as a baseline planning assumption, not an edge case. Security and data protection models that were designed around human attackers may be insufficient when the adversary can simultaneously analyze assets, test access methods, and adapt in real time without human oversight. The agency specifically called out credential and API key hygiene — agents can use a single compromised token to fan out across multiple services at a pace that outpaces conventional alerting. Organizations should review whether their detection and response tooling can act at the same speed as an autonomous attacker, or whether human-only approval chains create fatal gaps.