Spain's Data Agency Gets First Report of AI-Powered Data Breach

Spain's data protection authority (AEPD) logged a breach notification that attributes a personal data breach to an autonomous AI agent built on a large language model; the filing describes an agent that autonomously chained reconnaissance, successful login, application probing, data modification, and access to financial documents. The claim is unconfirmed and lacks identifying details, but regulators warn this agentic attack model could accelerate and change incident response, regulatory obligations, and threat modeling.