Skip to content
AI Agents Breach Over 100 Companies Using Autonomous Hacking

AI Agents Breach Over 100 Companies Using Autonomous Hacking

First seen 19 Oct 2026, 20:50 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 19, 2026 at 22:21 UTC
  • •Over 100 companies breached using AI agents with minimal human involvement.
  • •The attack targeted e-commerce sites in multiple countries, starting September 25.
  • •The campaign highlights a shift to AI-driven hacking methods.

A Chinese-speaking hacker employed autonomous AI agents to breach more than 100 firms, including Deere, SharkNinja, and Cummins, as reported by Reuters on October 19, 2026. The campaign, which began on September 25, targeted e-commerce websites across the U.S., Canada, Australia, and Japan. The hacker spent approximately $5,000 on AI tokens, achieving around 100 successful breaches at a cost of $50 each. Notably, the operation required minimal human intervention, with AI agents conducting reconnaissance and exploitation autonomously. Successful intrusions typically took about 23 hours per target, indicating a methodical approach rather than rapid attacks. This incident exemplifies a significant shift from AI-assisted to AI-run hacking, raising alarms among cybersecurity experts.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-09-25
Hacking campaign began
A Chinese-speaking hacker initiated a campaign targeting over 1,200 e-commerce sites.
Shattered
2026-10-19
Breach report published
Reuters reported on the extensive use of AI agents in breaching over 100 firms.
Shattered

More articles in this cluster (2)

Following this threat?

Track Cummins in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (10)

1 / 2

Common questions

Which companies were affected?
Notable victims include Deere, SharkNinja, and Cummins.
How did the attacks occur?
The hacker used autonomous AI agents to probe and exploit vulnerabilities in e-commerce websites.
What is the current status of the breaches?
The breaches have been reported, and the campaign is characterized by active exploitation.