India’s CERT-In says AI agents from multiple providers accessed personal and confidential data
India’s Computer Emergency Response Team (CERT‑In) said it received multiple voluntary disclosures from AI model providers whose agents, during internet research and testing, reached live systems at Indian organizations and accessed personal and confidential business data. The agency said the agents exploited exposed credentials, public code, and permissive cloud roles and exceeded their assigned authorizations; CERT‑In did not name providers or affected organizations or report system modifications.