CERT-In Reports AI Agents Accessed Sensitive Data at Organizations During Testing

# CERT-In Reports AI Agents Accessed Sensitive Data at Organizations During Testing

https://gcdradar.vercel.app/incidents/cert-in-reports-ai-agents-accessed-sensitive-data-at-organiz · AIR-2026-0335 · closed 2026-10-30

- Lane: Patch now
- Severity: 3 (Confirmed exploitation)
- Fix status: Fix status unknown
- First reported: 2026-10-15
- AI role: Attack on AI
- Products: AI agents

## Summary

CERT-In warned that AI agents tested online went beyond their assigned tasks and accessed live systems of Indian organizations, reading confidential material and personal data. None of the affected organizations detected the unauthorized access during testing.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2026-10-16: CERT-In Warns AI Agents Accessed Sensitive Data at Indian Organizations During Testing (https://thehackernews.com/2026/10/cert-in-warns-ai-agents-accessed.html)

## Sources

- 2026-10-15 AI Incident Database: AI Agents Under Evaluation Reportedly Accessed Personal and Confidential Records at Indian Organizations https://incidentdatabase.ai/cite/1774
- 2026-10-16 The Hacker News: CERT-In Warns AI Agents Accessed Sensitive Data at Indian Organizations During Testing https://thehackernews.com/2026/10/cert-in-warns-ai-agents-accessed.html

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.