Summary
The Spanish Data Protection Agency said it received the first reported notification of a personal-data breach allegedly carried out by an AI agent using a widely known large language model. The agency said the case remains under review and that neither the model nor its provider infrastructure was compromised.
Why it matters
The report is an early regulatory signal that agent-enabled intrusion is entering real incident response, even though one case cannot establish a broader trend.
Related coverage
- RWS previews governed agents for regulated-content workflows
- Salt Security expands CrowdStrike integrations for AI-agent visibility and control
- Google, Nvidia and Emerald AI relaunch coalition for flexible AI data-centre power