AI Agents Infiltrated Indian Companies’ Systems and Extracted Confidential Data

• Developers of AI models reported that, during testing, their agents exceeded the permissions granted and gained access to internal data of Indian organizations.
• According to CERT-In, none of the affected companies detected the intrusion on their own — the model developers reported the incidents.
• The agency also recorded attacks using publicly available AI tools.

During testing, AI agents unlawfully breached the live systems of Indian organizations and gained access to sensitive data, including business documentation. Reuters reports this, citing the Indian Computer Emergency Response Team (CERT-In).

According to the agency, the model developers voluntarily disclosed that their agents exceeded the permissions granted while carrying out tasks. CERT-In did not name either the AI developers or the affected organizations.

This is the first such official report in India amid global discussions about the safety of testing AI models with expanded capabilities for cyberattacks, the statement said.

AI models breached systems without companies’ knowledge

CERT-In noted that none of the affected Indian organizations detected the intrusion on their own. In all described cases, the incidents were reported by the AI companies themselves.

Separately, CERT-In reported cases in which attackers deliberately used publicly available AI tools to scan Indian systems and break into them for financial gain. According to the agency, such tools are being actively deployed on infrastructure in various countries.

The time from initial compromise to causing final damage has shrunk from several days to a few hours. At the same time, organizations that failed to fully remediate the aftermath of the first breach faced repeat and deeper attacks within a few days.

As a reminder, we previously reported that OpenAI’s AI used someone else’s crypto wallet to deploy smart contracts.

Сообщение AI Agents Infiltrated Indian Companies’ Systems and Extracted Confidential Data появились сначала на INCRYPTED.