Spanish Data Protection Agency

Spain receives first alleged report of AI agent data breach

Spain’s Data Protection Agency confirmed the first reported personal-data breach carried out by an autonomous AI agent, which identified vulnerabilities, accessed a system, and altered personal data and invoices with limited human input. Regulators warn that AI agents can accelerate attacks and raise accountability questions, underscoring the need for robust defenses and strict GDPR-compliant reporting as organizations increasingly adopt autonomous AI.