On September 15-16, 2026, the Agencia Española de Protección de Datos (AEPD), Spain’s data protection authority, received and publicly acknowledged the first breach notification attributed to a fully autonomous AI agent. According to the AEPD and multiple independent sources, the incident involved an AI agent built on a mainstream large language model that autonomously gained…
