Spain logs first data breach by AI agent, AEPD says

Spain's AEPD reported its first personal data breach notification involving an AI agent, which used an LLM to find vulnerabilities, access systems, and alter data. This marks a first in regulatory reporting, signaling a new threat vector. The case is preliminary and details are limited, but it may prompt regulatory and industry responses.