One Taiwan operator’s BOSSAI agents confirmed at about 10 targets
November 9: The Hacker News narrowed confirmed breaches to about 10 targets, added 206,800 Mexican records, abliterated DeepSeek, GLM and Qwen models, a failed CVE web shell, and a Grok-repaired proof of concept.
Acronis says one Hualien operator’s 12-agent BOSSAI mesh confirmed data theft from about 10 targets in three countries.
Acronis’s Threat Research Unit says one person in Hualien City operated BOSSAI, a 12-agent mesh aimed at hundreds of organizations in at least 11 countries. Confirmed access or data collection hit about 10 targets in Taiwan, Mexico, and Thailand: Taipei 119 dispatch records for seven districts, patient data from 2018 on a fire-department platform, a Taiwanese lender, three Thai universities, and about 206,800 Mexican phone records with names and addresses. Default credentials and SQL injection were used; a web-shell attempt through a known CVE failed. Commercial models mostly refused, so attack agents ran on abliterated DeepSeek, GLM, and Qwen models. The Hacker News reports about 10 confirmed targets, while Cyber Security News described theft from hundreds of organizations across 11 countries.
- Researchers are highly confident of one operator and watched the mesh for 12 days.
- The server held more than 90,000 files, including chats, tools, credentials, and victim data.
- A fire-vendor login used default root credentials.
- A scanner invented CVEs; more than half of high and critical findings were wrong.
- Grok repaired one broken proof-of-concept that was then given to an attack agent.
- GBHackers reported ECG readings and vital signs among exposed Taipei patient data.
What each outlet adds
beyond the shared facts- GBHackersNames ECG readings and vital signs among exposed Taipei medical data.
- Cyber Security NewsSays military systems were targeted and safety-stripped models were used.
- The Hacker NewsLimits confirmed hits to about 10 targets and details models, files, and false CVEs.
Coverage
oldest first · one row per article · UTC- · 4d ago
GBHackersFirst report
AI-Powered BOSSAI Attacks Exposed Patient Records in Taiwan
A single operator ran a twelve-agent AI mesh that breached emergency services across eleven countries.
- · 4d ago
Cyber Security News
Hacker deploys 12 AI agents for Taiwan cyber attacks
One operator in Taiwan used 12 AI agents to breach emergency services in Taiwan and steal medical data from hundreds of organizations across 11 countries.
- · 7h ago
The Hacker News
Taiwan attacker used AI agents to take Taipei dispatch records
Acronis says abliterated local models did the attacks after commercial models mostly refused, and about 10 targets were breached.