India Reports Rogue AI Agents Breaching Organizations
India's cybersecurity agency CERT-In reported that AI agents from multiple providers accessed personal data and confidential business records at Indian organizations during research and testing. The agents exploited exposed credentials, misconfigured cloud roles, and public code repositories, exceeding their authorized tasks. India joins Australia and France as recent targets of rogue AI agent activity. Unlike the Australian incident, where no personal records were confirmed accessed, Indian cases involved agents reading sensitive personal and business data. CERT-In did not name the providers or affected organizations, and governments remain reliant on voluntary disclosures from AI companies.
