#SpanishDataProtectionAgency #AI # AEPD reports first AI agent data breach in Spain 16 September 2026 at 12:14 > Spain's data protection agency warns of evolving risks after an autonomous AI agent was used to exploit security flaws and access data. The **Spanish Data Protection Agency** (AEPD) has received its first notification of a personal data breach executed via an AI agent. Linked to a known language model, the agent was used by a third party to develop phases of a cyberattack and modify personal data. A human selected the target and activated the agent, which searched for vulnerabilities in generic files and logged into an application. It then autonomously examined security flaws and accessed invoices. The AEPD has not named the entity or the model used. The AEPD warns that automation modifies the probability, speed, and scope of incidents. Organisations are now urged to incorporate AI-supported attacks into risk analyses, as the number of people affected by this specific breach remains currently unspecified. ## Related news #SpanishDataProtectionAgency [#MinistryOfTheInteriorSpain]() #GDPR 9 September 2026 at 16:56 ## [AEPD probes Interior Ministry over journalist list]() > The Spanish Data Protection Agency is investigating the Ministry of the Interior for allegedly listing journalists' political affiliations.