A single attacker using AI agents pulled emergency dispatch records covering seven Taipei districts, researchers at Acronis's Threat Research Unit said last week.

The agents also found a Taipei fire department platform exposing patient data from 2018, including ECG readings and ambulance video footage, without a login.

The researchers are highly confident that the attacker is a single person based in Hualien City, Taiwan. He aimed the agents at hundreds of organizations in at least 11 countries, including emergency services, banks, universities and military systems. The agents collected data or accessed systems at about 10 of them in Taiwan, Mexico and Thailand.

The evidence comes from the attacker's own server, which initially appeared to be a misconfigured development system. It turned out to be his operational attack platform, containing more than 90,000 files, including the agents' conversations, his command history, hacking tools, credentials, and victims' data.

The agents did not communicate with each other, so the attacker manually pasted one agent's output into another. Commercial AI models mostly refused to help him attack. The attacking agents therefore ran almost entirely on "abliterated" models, meaning AI models run locally with their safety training removed.

Taiwan was targeted far more heavily than any other country, according to the researchers' technical analysis. The most serious confirmed harm there involved emergency-services data.

The dispatch records came from a city's system for 119, Taiwan's emergency number for fire and ambulance services. The agents pulled them from the system's API, and they include incident times, response types, case status, and street-level locations.

Source link