Spain’s Privacy Regulator Discloses the Country’s First Data Breach Carried Out by an Autonomous AI Agent
Spain's AEPD disclosed on September 14, 2026 that an autonomous AI agent independently found a vulnerability, broke into a company's systems, and altered records and accessed invoice data -- a case regulators call the country's first agent-driven data breach.