The Spanish Data Protection Agency (AEPD) issued an alert about what it considers to be the first autonomous cyberattack carried out by artificial intelligence in Spain. The agency is currently investigating the incident.
The attack involved an AI agent that acted autonomously, meaning without direct human intervention during execution. The artificial intelligence system managed to exploit security flaws to access a system.
After gaining access, the AI agent altered personal data present in that system. AEPD classifies this incident as significant because it involves an autonomous AI action, and not a traditional attack conducted by humans.
This case sets a precedent in Spanish cybersecurity, with the agency investigating the circumstances of the attack and its implications for the data protection of citizens.
