Internal data access incident after agent advice
Unnamed: a large technology company · internal engineering agent
- What happened
- An internal AI agent at a large technology company, used by an engineer to analyse a colleague's technical question, posted an answer without the engineer approving it. An employee followed the incorrect advice, which made sensitive company and user-related data available to engineers without permission for about two hours (reported).
- Impact
- The company treated it as a high-severity security incident (reported). According to press reports, the company said no user data was mishandled; no external access was reported.
- What would have caught it
- Require a person to approve before an agent posts operational advice. Check proposed access changes against permissions before they are applied.
- Sources
- The Information report (source date 2026-03-18)
- TechCrunch report (source date 2026-03-18)
- The Guardian report (source date 2026-03-20)