Spain's data protection agency AEPD reported the first personal data breach allegedly carried out by an AI agent. The agent used a large language model to identify vulnerabilities, gain unauthorised access, alter personal data, and view invoices, with minimal human involvement. AEPD warned AI accelerates existing cyber threats, reducing detection and containment time.