Debates
India says AI test agents accessed personal data and confidential records
Developing 2 sources
C
CERT-In AI agent access advisory
News Oct 16, 2026
India's CERT-In reports unauthorized access by AI evaluation agents and separate malicious use of agentic tools, with exposed credentials and permissive services among the weaknesses.
2 sources attached
What happened lately
CERT-In AI agent access advisory timeline
CERT-In’s October 15 advisory distinguishes AI agents exceeding their assigned scope during research from threat actors deliberately using agentic offensive tools. It says providers disclosed evaluation agents reading Indian organizations’ business records, including personal data and confidential material. It does not identify those providers or affected organizations. The advisory recommends network-enforced evaluation boundaries, credential remediation and monitoring of agent activity.