Reported by 5 outlets

Timeline

1. original reporting

   Spain’s data protection authority: First cyberattack using an AI agent A cyberattack was reported in Spain where an AI agent could alter dat

   www.heise.de · 27d ago · September 16th, 2026

   Spain’s data protection authority: First cyberattack using an AI agent A cyberattack was reported in Spain where an AI agent could alter dat

   via Mastodon https://www.heise.de/en/news/Spain-s-data-protection-authority-First-cyberattack-using-an-AI-agent-11454572.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege&utm_source=mastodon

2. update from cyberwald.com

   Cyberwald - Cybersecurity News - 16.09.2026 Today's podcast: BambooToken: New malware controls Windows and Linux via MQTT, Cisco Sec...

   cyberwald.com · 28d ago · September 16th, 2026

   Cyberwald - Cybersecurity News - 16.09.2026 Today's podcast: BambooToken: New malware controls Windows and Linux via MQTT, Cisco Sec...

3. update from www.heise.de

   Spain reports first cyberattack carried out with an AI agent

   www.heise.de · 28d ago · September 16th, 2026

   Spain's data protection authority (AEPD) has reported the first data breach caused by an AI agent. According to the AEPD, an AI agent based on a known language model autonomously searched for vulnerabilities in generic files, successfully logged in, located further weaknesses, modified personal data, and accessed invoices. The agency described this as a qualitatively new type of cyberattack. The AEPD emphasized that the information came from the affected organization's breach notification, not from a compromised AI provider. The key concern is that a third party used an AI agent as a tool to chain together different attack phases successfully. The agency noted that AI agents can receive a target, plan intermediate steps, deploy tools, execute code, query sources, interpret results, and autonomously adapt their approach based on findings. The primary novelty is the speed of such attacks. AEPD deputy director Francisco Perez Bes wrote that AI-assisted attacks must be explicitly included in risk assessments, noting that general references to malware, phishing, or unauthorized access are insufficient. He warned that defenses designed for manually executed attacks may be too slow against AI-driven ones, and that digital credentials and API keys gain critical importance since compromised keys let attackers move at machine speed. via Mastodon https://www.heise.de/news/Spaniens-Datenschutzaufsicht-Erster-Cyberangriff-mithilfe-eines-KI-Agenten-11454545.html

4. update from www.heise.de

   Spain reports first cyberattack attributed to AI agent under GDPR

   www.heise.de · 27d ago · September 16th, 2026

   Spain's data protection authority has received what it describes as the first reported data breach attributed to an AI agent under GDPR.

5. update from securityweek.com

   First Agentic AI Data Breach Reported to Spanish Regulator

   securityweek.com · 27d ago · September 16th, 2026

   Investigation into the attack is continuing, and the AEPD uses its words carefully. Nevertheless, although AI-assisted attacks have become common (deepfakes, authoring phishing emails, scaling attacks through automation, etcetera), this appears to be the first known agentic attack outside of a rogue frontier model agent. Bad actor agents are moving beyond a theoretical probability into the real world. The attack itself involved a successful login, followed by a search for vulnerabilities, and the ability to modify personal data and access invoices. “An agent can receive a goal, plan intermediate tasks, use tools, execute code, consult sources, interpret results, and modify its actions autonomously, based on what it finds.” And, it should be added, at speed. The effect requires a four-fold modification to risk management. First, the danger of AI assistance and adversarial agents must become part of risk analysis. Second, incident response times must be improved. Third, the importance of digital IDs and credentials must be recognized, and they must be better protecte

6. update from bleepingcomputer.com

   Spain's data agency gets first report of AI-powered data breach

   bleepingcomputer.com · 27d ago · September 16th, 2026

   The Spanish Data Protection Agency (AEPD) was notified of an attack allegedly carried out with an AI agent powered by a known large language model (LLM). The organization reporting the incident said that the AI agent searched for flaws, logged into their systems, and then probed apps for additional security issues. In the final stages of the attack, the agent modified personal data and accessed financial documents. Although the Spanish agency has yet to investigate the incident and verify the information, the AEPD says the notification shows AI-related data breaches are no longer merely theoretical. “Once it gained access to the system, it began autonomously searching for vulnerabilities in the application. After finding them, it was able to modify personal data and access invoices.” AEPD underlined that AI does not create new threats, but it can increase the speed, scale, and adaptability of cyberattacks, as well as reduce defenders' response-time margins, a paradigm shift recently highlighted by the country's National Cryptologic Center .

7. mentioned by www.securityweek.com

   🔒 Security News Digest - 2026-09-16 📊 11 updates from 7 sources: 🔹 SecurityWeek: First Agentic AI Data Breach Reported to Spanish Regulator

   www.securityweek.com · 27d ago · September 16th, 2026

8. mentioned by cyber.netsecops.io

   https:// cyber.netsecops.io/articles/sp ain-reports-first-data-breach-by-autonomous-ai-agent/?utm_source=mastodon&utm_medium=social&utm_camp

   cyber.netsecops.io · 25d ago · September 18th, 2026