cybermap.lol
AI-era record · 60 entries since 2023

Security incidents involving AI agents and AI developer tools.

Coding agents that deleted production data. Poisoned packages aimed at AI tooling. AI companies that exposed data. Attackers who put AI to work. Entries we publish ourselves link their primary source unless the link would name an organization we have not named. Entries marked "auto · unreviewed" are news drafts, published automatically and not yet reviewed. How we decide.
Coding agents 13Agents that destroyed data 7MCP and agent tools 2Prompt injection 3AI supply chain 20Data exposure 10LLM apps 7Attacks run with AI 18Deepfakes 3Model theft 1

2026 · 37

  1. 2026-10-12AI eraauto · unrevieweddata breach · Ukraine
    Reported data breach at an organization in Ukraine
    no primary source yet
  2. 2026-10-08AI eraauto · unrevieweddata breach · South Korea
    Reported data breach at an organization in South Korea (Financial)
    primary source on file, not linked
  3. 2026-10-07AI eraauto · unreviewedAI-era incident · United States
    Reported AI-era incident at a US organization (Technology/Education)
    primary source on file, not linked
  4. 2026-10-06AI eraauto · unrevieweddata breach · South Korea
    Reported data breach at an organization in South Korea (financial)
    primary source on file, not linked
  5. 2026-10-06AI eraauto · unreviewedAI-era incident · United States
    Reported AI-era incident at a US organization (Technology)
    primary source on file, not linked
  6. 2026-10-05AI eraauto · unreviewedAI-era incident · United States
    Reported AI-era incident at a US organization (Technology/Non-profit)
    primary source on file, not linked
  7. 2026-10-02AI eraAI-era incident · United States
    Reported AI-era incident at a US organization (Government)
    no primary source yet
  8. 2026-09-30AI eraAI-era incident · Unknown
    Reported AI-era incident at an organization (Technology)
    primary source on file, not linked
  9. 2026-09-29AI eraauto · unreviewedAI-era incident · Australia
    Reported AI-era incident at an organization in Australia (government)
    primary source on file, not linked
  10. 2026-09-26AI eraauto · unreviewedAI-era incident · United States
    Reported AI-era incident at a US organization (artificial intelligence)
    primary source on file, not linked
  11. 2026-09-23AI eraAI-era incident · Unknown
    Attacker used AI agent frameworks to skim over 600,000 cards from online retailers
    primary source on file, not linked
  12. 2026-09-22AI eraauto · unreviewedAI-era incident · United Kingdom
    Reported AI-era incident at a UK organization
    primary source on file, not linked
  13. 2026-09-21AI eraAI-era incident · Unknown
    Google's Gemini accessed three companies' systems during a cybersecurity test
    primary source on file, not linked
  14. 2026-09-19AI eraauto · unreviewedAI-era incident · United States
    Reported AI-era incident at a US organization (AI/Software)
    no primary source yet
  15. 2026-09-18AI eraauto · unreviewedsupply chain · Unknown
    Supply-chain compromise affecting an organization
    no primary source yet
  16. 2026-09-16AI eradata breach · Spain
    Spain's data protection agency was notified of an attack allegedly run by an AI agent
    primary source on file, not linked
  17. 2026-09-16AI erasupply chain · Unknown
    Hijacked AI coding assistant session spread malware to about 100 repositories
    primary source on file, not linked
  18. 2026-09-10AI eraAI-era incident · Unknown
    Suspected ShinyHunters affiliates used Claude to speed up data theft and extortion
    primary source: anthropic.comAttacks run with AICoding agentsAI supply chain
  19. 2026-09-10AI eraAI-era incident · Unknown
    Hacktivist used Claude to breach European political groups and build a doxxing site
    primary source: anthropic.comAttacks run with AICoding agents
  20. 2026-09-10AI eraAI-era incident · Unknown
    Espionage actor used Claude workflows to phish and steal data from Ukraine-linked targets
    primary source: anthropic.comAttacks run with AICoding agents
  21. 2026-09-10AI eraAI-era incident · Unknown
    Prompt injection into an AI vendor's evaluation sandbox leaked its production API keys
    primary source: anthropic.comPrompt injectionAI supply chainAttacks run with AI
  22. 2026-09-08AI eraAI-era incident · Unknown
    Attacker ran AI agents from a hijacked cloud to harvest thousands of credentials in hours
    primary source: cloud.google.comAttacks run with AICoding agents
  23. 2026-08-04AI eraAI-era incident · Unknown
    Agents in UK AISI cyber tests targeted a real open-source project and its maintainer
    primary source: aisi.gov.ukAgents that destroyed dataPrompt injectionAI supply chain
  24. 2026-07-30AI eraAI-era incident · Unknown
    Claude models accessed real third-party systems during misconfigured cyber evaluations
    primary source: anthropic.comAgents that destroyed dataData exposure
  25. 2026-07-30AI erasupply chain · Unknown
    Claude model in a misconfigured evaluation published a malicious package to PyPI
    primary source: anthropic.comAgents that destroyed dataAI supply chainAttacks run with AI
  26. 2026-07-16AI eraAI-era incident · United States
    OpenAI models in a cyber evaluation escaped their sandbox and breached Hugging Face
    primary source: huggingface.coAttacks run with AIAgents that destroyed data
  27. 2026-06-12AI eraAI-era incident · United States
    Google sues China-based phishing kit sellers it says used Gemini to build scam sites
    primary source: courtlistener.comAttacks run with AILLM apps
  28. 2026-05-14AI eraAI-era incident · Singapore
    Deepfake Zoom meeting with fake Singapore leaders led a victim to transfer S$4.9 million
    primary source: police.gov.sgDeepfakesAttacks run with AI
  29. 2026-05-12AI erasupply chain · France
    Mistral AI SDK releases on npm and PyPI were poisoned by the Mini Shai-Hulud worm
    primary source: docs.mistral.aiAI supply chain
  30. 2026-04-25AI eraAI-era incident · United States
    Cursor agent deleted PocketOS production data and backups with a Railway API token
    primary source: x.comCoding agentsAgents that destroyed data
  31. 2026-04-19AI erasupply chain · United States
    Vercel breached through a compromised third-party AI tool's Google OAuth app
    primary source: vercel.comAI supply chain
  32. 2026-03-31AI eradata breach · United States
    AI data firm Mercor breached via the poisoned LiteLLM package; expert data exposed
    primary source: mercor.comAI supply chainData exposure
  33. 2026-03-24AI erasupply chain · United States
    Two LiteLLM releases on PyPI carried a credential stealer after a CI tool breach
    primary source: docs.litellm.aiAI supply chain
  34. 2026-03-06AI eraAI-era incident · Unknown
    Claude Code ran terraform destroy and wiped DataTalks.Club production infrastructure
    primary source: aishippingblog.comCoding agentsAgents that destroyed data
  35. 2026-02-17AI erasupply chain · United States
    Unauthorized Cline CLI npm release followed prompt injection of an AI triage workflow
    primary source: github.comCoding agentsPrompt injectionAI supply chain
  36. 2026-02-02AI erasupply chain · Unknown
    Hundreds of malicious skills on OpenClaw's ClawHub marketplace delivered infostealers
    primary source: blog.virustotal.comAI supply chain
  37. 2026-02-02AI eradata breach · Unknown
    Social network for AI agents exposed its database, including 1.5M agent API tokens
    primary source on file, not linkedLLM appsData exposure

2025 · 15

  1. 2025-12-09AI eraAI-era incident · Unknown
    Mac stealer spread through shared ChatGPT and Grok chats placed atop Google results
    primary source: huntress.comLLM appsAttacks run with AI
  2. 2025-11-26AI eradata breach · United States
    OpenAI API user profile data exposed in a breach at analytics vendor Mixpanel
    primary source: openai.comLLM appsData exposure
  3. 2025-11-13AI eraAI-era incident · Unknown
    Group Anthropic ties to the Chinese state used Claude Code to run espionage intrusions
    primary source: www-cdn.anthropic.comCoding agentsMCP and agent toolsAttacks run with AI
  4. 2025-10-07AI eraAI-era incident · Unknown
    Chinese-language phishing operators used ChatGPT for lures and malware code (UTA0388)
    primary source: cdn.openai.comAttacks run with AI
  5. 2025-09-25AI erasupply chain · Unknown
    Fake postmark-mcp npm package secretly copied users' emails to an outside server
    primary source: postmarkapp.comMCP and agent toolsAI supply chainData exposure
  6. 2025-08-27AI eraAI-era incident · Unknown
    Extortion actor used Claude Code to automate intrusions and ransom demands (GTG-2002)
    primary source: www-cdn.anthropic.comCoding agentsAttacks run with AI
  7. 2025-08-27AI erasupply chain · Unknown
    Malicious Nx npm releases used local AI coding CLIs to hunt for secrets
    primary source: nx.devAI supply chainCoding agentsAttacks run with AIData exposure
  8. 2025-08-20AI erasupply chain · United States
    Stolen Drift chatbot OAuth tokens used to pull data from customer Salesforce orgs
    primary source: trust.salesloft.comAI supply chain
  9. 2025-07-23AI erasupply chain · United States
    Amazon Q Developer VS Code extension shipped with injected malicious code
    primary source: aws.amazon.comCoding agentsAI supply chain
  10. 2025-07-18AI eraAI-era incident · United States
    Replit Agent deleted SaaStr's production database during a code freeze
    primary source: saastr.comCoding agentsAgents that destroyed data
  11. 2025-07-17AI eraAI-era incident · Ukraine
    Phishing CERT-UA links to APT28 delivered LAMEHUG, malware that asks an LLM for commands
    primary source: cert.gov.uaAttacks run with AI
  12. 2025-07-10AI erasupply chain · Russia
    Fake Solidity extension installed in the Cursor IDE led to about $500,000 crypto theft
    primary source: securelist.comCoding agentsAI supply chain
  13. 2025-05-23AI erasupply chain · Unknown
    Fake AI SDK packages on PyPI hid an infostealer inside PyTorch model files
    primary source: reversinglabs.comAI supply chain
  14. 2025-01-29AI eradata breach · China
    AI chatbot provider left a database open with chat logs and API secrets
    primary source on file, not linkedLLM appsData exposure
  15. 2025-01-10AI eraAI-era incident · United States
    Storm-2139 used stolen customer API keys to abuse Azure OpenAI and resell access
    primary source: blogs.microsoft.comLLM appsAttacks run with AI

2024 · 5

  1. 2024-12-05AI erasupply chain · United States
    Ultralytics YOLO releases on PyPI shipped a crypto miner after a CI compromise
    primary source: github.comAI supply chain
  2. 2024-07-12AI eradata breach · United States
    Fake AI art tool infected a Disney employee; 1.1 TB of Slack data was stolen
    primary source: justice.govAI supply chain
  3. 2024-05-31AI eradata breach · United States
    Hugging Face detected unauthorized access to Spaces secrets and revoked tokens
    primary source: huggingface.coAI supply chainData exposure
  4. 2024-03-06AI eradata breach · United States
    Ex-Google engineer convicted of stealing AI supercomputing trade secrets
    primary source: justice.govModel theft
  5. 2024-02-02AI eraAI-era incident · United Kingdom
    Deepfake video call led an Arup Hong Kong employee to transfer about HK$200 million
    primary source: arup.comDeepfakesAttacks run with AI

2023 · 3

  1. 2023-09-18AI eradata breach · United States
    Microsoft AI researchers' overbroad storage token exposed internal data on GitHub
    primary source: microsoft.comData exposureAI supply chain
  2. 2023-09-13AI eraAI-era incident · United States
    Retool breached after SMS phishing and a call using a deepfake of an employee's voice
    primary source: retool.comDeepfakesAttacks run with AI
  3. 2023-03-24AI eradata breach · United States
    ChatGPT bug showed other users' chat titles and some payment details
    primary source: openai.comLLM appsData exposure

Follow it: RSS. Know of an incident we are missing? Email founders@heimwall.ai with a primary source.