Security/press release/2026-09-10

Hacker uses open-source AI agents to breach organizations and steal credit card data

A hacker, identified by some reports as a Chinese operator, utilized three open-source AI agents to infiltrate numerous organizations. This operation reportedly led to the theft of over 600,000 credit card records. Affected entities include a Fortune 500 hospitality company, a major US airline, and at least 25 other organizations, though one report suggests hundreds of sites were impacted. One outlet also noted the cost per target was as low as $25. Multiple tech and security outlets are reporting this incident, likely based on a cybersecurity firm's findings, though the original source is not explicitly named in the headlines.

5 articles from 5 outlets covered this story. Their coverage differs on 4 points. The underlying claim is sourced from a press release.

What do all outlets agree on?

5 outlets covered “Hacker uses open-source AI agents to breach organizations and steal credit card data”. All of them report the following:

  • A hacker used AI agents/tools
  • The agents were open-source
  • Multiple organizations were breached
  • Credit card data was stolen
  • Over 600,000 credit card records were stolen

Did outlets disagree about this?

Yes. Coverage of “Hacker uses open-source AI agents to breach organizations and steal credit card data” differs on 4 points. Each account below is how a different outlet described the same event:

The perpetrator was a Chinese operator.

TechRadar Pro, eSecurity Planet

The perpetrator was a general crook/hacker.

The Register, news.lavx.hu, Computerworld

Hundreds of sites were affected.

TechRadar Pro

A Fortune 500 hospitality company, a major US airline, and 25+ other organizations were affected.

The Register, news.lavx.hu

Which figures do outlets report differently?

1 figure in this story is reported with conflicting values:

Number of organizations breachedhundreds vs 25+

Which outlets covered this?

All 5 articles found on this story, grouped by the stance of the piece. Every link goes to the original publisher.

What related stories are there?

Which companies does this involve?

Get the week in AI in one email

What happened, which outlets reported it, and where their coverage differed. One issue a week.

The first issue hasn’t gone out yet. Subscribe and it’s the one you’ll get.

We’ll send the digest and nothing else. One-click unsubscribe. Privacy.