Spain Reports First AI Agent Data Breach

Spain's data protection agency, the AEPD, received its first notification of a personal data breach carried out by an AI agent. The agent used a large language model to autonomously find and exploit a vulnerability, accessing personal data and invoices.