On September 14, 2026, Spain’s data protection regulator, the Spanish Data Protection Agency (AEPD), disclosed an unusual cybersecurity incident.
An AI agent had reportedly gained access to an organization’s system. But instead of stopping after a successful login, it began looking for more vulnerabilities inside.
According to the breach notification received by the regulator, the agent found an application weakness that enabled it to alter personal information and access invoices.
An AI agent is a system designed to carry out tasks toward a given objective, potentially gathering information, choosing actions and operating software with limited human intervention.
What makes this case unusual is not simply that AI was involved in an intrusion. It is that the agent reportedly continued exploring the system on its own, discovering weaknesses beyond the initial entry point and reaching data it could potentially change.
That does not mean the AI suddenly developed criminal intentions. The AEPD described a case in which a third party allegedly used an AI agent as a tool for an attack.