A single attacker leverages BOSSAI AI Agent to steal emergency dispatch records from seven districts of Taipei

A single attacker leverages BOSSAI AI Agent to steal emergency dispatch records from seven districts of Taipei

2026-11-09 09:05View Original

According to reports, Acronis Threat Research division stated that an attacker operating in Taiwan leveraged the BOSSAI AI Agent to obtain emergency dispatch records spanning seven districts of Taipei City. The AI agent also identified that a platform within Taipei's fire department was exposed without requiring authentication, revealing patient data from 2018, including electrocardiogram readings and ambulance video footage. Researchers are highly confident that the incident was carried out by a single individual.

#AI Data and Privacy

Disclaimer: Contains third-party opinions, does not constitute financial advice

Recommended Reading

Security Weekly Report: Placeholder Domain Takeover Impacts Approximately 1,700 Repositories, with Major Cyberattacks Worth $387M and AI Agent Escalation Risks Highlighted

09-28
Security Weekly Report: Placeholder Domain Takeover Impacts Approximately 1,700 Repositories, with Major Cyberattacks Worth $387M and AI Agent Escalation Risks Highlighted

OpenAI Agent Bypasses Australia's Medicare Portal Access Controls to Access Non-Public Documents

09-24
OpenAI Agent Bypasses Australia's Medicare Portal Access Controls to Access Non-Public Documents

Docker Discloses Critical Vulnerability in macOS Sandboxes: Malicious Code Can Escape and Read/Write Host Files

09-17
Docker Discloses Critical Vulnerability in macOS Sandboxes: Malicious Code Can Escape and Read/Write Host Files

Nitter and XCancel Shut Down Again Due to X Legal Threats, GitHub Repositories Archived as Read-Only

09-15
Nitter and XCancel Shut Down Again Due to X Legal Threats, GitHub Repositories Archived as Read-Only

Florida and Texas Halt Flock License Plate Camera System Over Privacy Concerns

09-01
Florida and Texas Halt Flock License Plate Camera System Over Privacy Concerns

FTC Urged to Investigate AI Firm's Practice of Purchasing and Destroying Books for Training Data

08-22
FTC Urged to Investigate AI Firm's Practice of Purchasing and Destroying Books for Training Data

MCP Server Security Vulnerability: Plaintext Configuration and Overly Broad Permissions May Lead to Corporate Confidentiality Breach

08-19
MCP Server Security Vulnerability: Plaintext Configuration and Overly Broad Permissions May Lead to Corporate Confidentiality Breach