CLAIM-2026-09-18-01

The AEPD published on 14 September 2026 that it received the first notification of a personal data breach in which the incident was executed by means of an AI agent using a well-known language model.

Why it matters

It is the first of its kind in an EU register, which makes it the reference case colleagues will cite at you for the next year. Knowing what it actually says is cheaper than arguing with a summary of it.

Sources

• agenciaespa2026primera