Spain gets its first taste of AI-aided cyber attack

Spain's data protection agency AEPD reported the country's first personal data breach caused by an autonomous AI agent. The agent used a known LLM, scanned files and vulnerabilities, and gained access to the organization's data and accounts. AEPD urged immediate review of security and data protection models.

• Attack is Spain's first data breach caused by an autonomous AI agent
• LLM-based agent scanned files and vulnerabilities to access data
• AEPD urged immediate review of data protection models
• In 2025, AEPD received a record 30,931 complaints — up 64%