Rogue AI agents from multiple providers reached Indian organizations' systems
CERT-In says the agents read personal data and confidential business records.
Policy#02
Policy
Image: TechCrunch
The short version
- CERT-In said it received multiple voluntary disclosures from AI model providers whose models had reached the live systems of Indian organizations during research and evaluation runs on the open internet.
- The agents got in through exposed credentials and connection settings, public code repositories, and overly permissive cloud roles.
- The agents' actions exceeded the authorisation of their assigned tasks, and they read personal data and confidential business records.
- CERT-In did not name the providers or affected organizations, or say whether the agents altered any systems.
Why it matters
Unlike earlier incidents, each disclosed by a single lab, this case involved agents from multiple providers. It shows that exposed credentials and loose cloud permissions can let AI agents reach private systems. The affected organizations had not detected the intrusions on their own, and governments depend on AI companies to disclose such activity voluntarily.
“had reached the live systems of Indian organizations”