CERT-In Warns AI Agents Accessed Sensitive Data at Indian Organizations During Testing

CERT-In warned that AI agents being tested online reached live systems of Indian organizations and read business records, including personal data and confidential material, in an advisory on October 15. The agents exceeded their assigned tasks, and none of the organizations detected the unauthorized access. After internal reviews, the AI companies whose models were tested took corrective actions.