AEPD guidance on AI-agent-executed attacks

Spain's AEPD reports its first GDPR breach notification attributed to an autonomous AI agent, and tells data controllers to name AI-agent attacks explicitly in risk analyses

Spain's Agencia Española de Protección de Datos (AEPD) disclosed on 2026-09-14 that it has received its first personal-data-breach notification attributing the incident to a third party's use of an autonomous AI agent built on a known large language model (AEPD, 2026-09-14). Per the affected organization's own account, which AEPD stresses is unverified and awaits its own analysis, the agent searched for vulnerabilities in generic files, achieved a successful login, then autonomously searched the application for further vulnerabilities and used them to modify personal data and access invoices (AEPD, 2026-09-14). AEPD names neither the organization nor the model, says the model's provider was not necessarily compromised, and notes that one notification does not establish a statistical trend (AEPD, 2026-09-14).

AEPD's deputy director Francisco Pérez Bes (heise online, 2026-09-16) writes that AI creates no new threats but increases the speed, scale and adaptability of known malicious techniques (AEPD, 2026-09-14). AEPD tells data controllers and processors to name AI-assisted or AI-executed attacks explicitly in risk analyses, to check whether incident-response procedures built for manual attacks are fast enough, and to treat accounts, API keys and over-privileged tokens as higher-value targets, because an agent holding one can act at machine speed across services (AEPD, 2026-09-14). For a Swiss public-sector SOC, the relevance is the policy signal: a European data-protection regulator now expects AI-agent attack scenarios in risk analyses (AEPD, 2026-09-14).