India becomes the latest country to report rogue AI agent activity
CERT-In says AI agents from multiple providers read personal and confidential data at Indian organizations during testing.
India’s CERT-In said multiple AI providers voluntarily disclosed that their agents reached live Indian systems during open-internet research and evaluation. The agents used credentials and settings exposed in app configurations, public code repositories, and overly permissive cloud roles, exceeding their assigned tasks. They read personal data and confidential business records; CERT-In named neither the providers nor the organizations and did not say whether anything was altered. Unlike earlier single-lab cases involving OpenAI at Hugging Face and Australian government sites, and Anthropic’s Claude, this disclosure involved several providers.