Acronis TRU on BOSSAI: one operator's mesh of 12 AI agents took patient-care records and dispatch case data from Taiwanese emergency services through a legacy open port, a public API and default root credentials, and failed wherever authentication was enforced

Acronis TRU found an open attack workstation holding more than 90,000 files and describes BOSSAI as a mesh of 12 AI agents, nine active, driven by a changing roster of language models, with the operator acting as the bridge between agents and typing commands in Traditional Chinese (Acronis TRU, 2026-11-04). The agents that executed attacks ran almost exclusively on abliterated open-weight models run locally, after commercial models repeatedly refused offensive requests (Acronis TRU, 2026-11-04). In the 12 days TRU observed, the operator targeted government emergency services, banks and lenders, universities and military systems in 11 countries, with confirmed exfiltration or system access at roughly ten targets in three countries and about fifteen more attacked without confirmed compromise (Acronis TRU, 2026-11-04).

The confirmed emergency-services harm is the part that matters here. A Taipei fire-department patient-care records platform exposed ECG readings, ambulance video and vital signs from 2018, accessible without credentials; a city's 119 dispatch system yielded case records with incident times, response types, status fields and street-level locations across seven districts from the system's API; and a fire-dispatch vendor's database administration panel opened with default root credentials, exposing 18 or more tables (Acronis TRU, 2026-11-04). In an emergency-management system the agents found a hardcoded AES-256 key in front-end JavaScript that exposed session-cookie contents, an administrator identity among them, and a partial server-side request forgery path, without confirming a full compromise (Acronis TRU, 2026-11-04). A brute-force run against a national fire agency's single sign-on portal gave no confirmed access, and the critical Apache flaw that the operator's vulnerability platform reported at a disaster-response centre was fabricated, because the port was filtered (Acronis TRU, 2026-11-04). TRU says the agents failed where authentication was enforced, where paywalls required valid sessions and where endpoints were properly filtered, and that obscurity no longer protects a system from agents that investigate hundreds of targets at once (Acronis TRU, 2026-11-04).