One Hacker Uses 12 AI Agents to Breach Taiwan’s Emergency Services and Steal Sensitive Data

A lone threat actor leveraged 12 AI agents and rented GPU infrastructure to breach hundreds of organizations across 11 countries, stealing sensitive medical records, personal data, and nearly 207,000 residential phone records. The attack platform was only discovered because the attacker left a development server publicly exposed and misconfigured, containing 90,000 files of victim data and operational logs — a critical operational security failure that also highlights how defenders can find attacker infrastructure. This incident demonstrates that AI-democratized attack tooling now allows a single individual to conduct campaigns previously requiring nation-state resources, fundamentally lowering the barrier to mass-scale breaches. The theft of emergency services and medical data carries severe real-world consequences, underscoring that configuration hygiene and data minimization are non-negotiable defensive baselines.