Spain’s data watchdog reports its first breach carried out by an AI agent

Spain’s data protection agency (AEPD) reported its first personal-data breach carried out by an AI agent that used a large language model to scan files, log in, find a flaw, modify personal data, and access invoices. The AEPD urges organisations to update risk analyses, response times, credential controls, and automated detection to counter AI-driven attacks.