The information displayed in the AIM should not be reported as representing the official views of the OECD or of its member countries.
A Chinese-speaking hacker used AI agents on the Cairn platform to autonomously breach over 100 company websites, including Deere, SharkNinja, and Cummins, across the US, Canada, Australia, and Japan. The AI system enabled rapid, large-scale intrusions with minimal human involvement, highlighting new cybersecurity risks.[AI generated]
Why's our monitor labelling this an incident or hazard?
The article explicitly describes the use of AI agents to autonomously conduct hacking activities that resulted in successful intrusions and data theft from multiple companies. The AI system's development and use directly led to realized harm, including theft of credit card data and unauthorized access to company websites. This fits the definition of an AI Incident because the AI system's use directly caused harm to property and communities. The involvement of AI is clear and central to the event, and the harm is materialized, not just potential.[AI generated]