Hacker Ran 12 AI Agents and Breached Taipei Emergency Services
A hacker in Taiwan ran 12 AI agents against hundreds of organisations in 11 countries and got into Taipei's emergency services, security firm Acronis says. Dispatch records from seven Taipei districts and ambulance patients' ECGs and vital signs from 2018 were pulled. He gave his lead agent full authority and used local DeepSeek models stripped of safety training after Grok and MiniMax refused to attack.
What happened
One hacker in Taiwan ran 12 AI agents against hundreds of organisations in 11 countries, according to Acronis. He got into Taipei's emergency services and pulled dispatch records from seven districts plus ambulance patients' ECGs and vital signs from 2018.
Why it matters
Sensitive health and emergency operations data was exposed, including patients' ECGs and vital signs. The case shows autonomous AI agents running unrestricted local models can be aimed at hundreds of organisations across many countries.
What to do
Review access and logs on exposed emergency and healthcare systems. Assess controls over AI agents and local models without safety training.
For the technical team
- Affected
- Serviços de emergência de Taipei; registros de despacho de sete distritos e ECGs e sinais vitais de pacientes de ambulân · Taipei emergency services: dispatch records from seven districts and ambulance patients' ECGs and vital signs from 2018. A Honduran air-force personnel system was dropped by an agent as out of scope.
- Exploitation
- Acronis reports a completed breach with data extraction. No PoC or KEV mentioned in the source.
- Fix
- No software to update
- Vector
- Attack run by 12 AI agents. The hacker gave his lead agent full authority and told it to stop asking him. He leaned on local DeepSeek models stripped of safety training after Grok and MiniMax refused to attack. The initial entry vector is not described in the source.
- More details
- Hundreds of organisations in 11 countries were targeted. One agent dropped the Honduran air-force personnel system on its own, deciding it was out of scope. Acronis is the only cited source.
Timeline
Incident opened.
Sources 1 source
- @IntCyberDigest @IntCyberDigest
