Hacker using AI breached 100 organizations, stole 600,000 card numbers

AI-Powered Hacker Breaches Over 100 Organizations

A Chinese-speaking hacker used publicly available AI models to breach more than 100 major organizations within a week, stealing data. The attacker stole more than 600,000 credit card numbers and spent only about $8,000, according to Eyal Sela of Gambit Security.

Eyal Sela of Gambit Security characterized the incident as one of the most severe abuses of artificial intelligence for exploitation seen to date by a single actor.

In five days, the single malicious actor breached more than one hundred distinct entities using autonomous AI agents across the globe. That pace averaged twenty companies per day, or roughly one company every seventy-two minutes, according to the researcher's detailed analysis.

Traditional defense mechanisms, including signature-based detection, are less effective against rapid, polymorphic, and potentially autonomous AI-driven attacks, creating an AI arms race between attackers and defenders.

Small and medium businesses face a particularly grim reality because the low cost lowers the barrier to entry for cybercriminals, and AI attacks can overwhelm their limited budgets.

Investors Bet Big on AI-Native Security

Shardul Shah, a partner at Index Ventures, has spent nearly two decades actively investing in cybersecurity and enterprise software companies across multiple stages and sectors worldwide.

Shah invested in six consecutive rounds in cloud security startup Wiz, which Google acquired for $32 billion earlier this year. That deal became one of Google's largest acquisitions ever, underscoring the strategic value of cloud security to major technology firms.

On TechCrunch's Equity podcast, Shardul Shah told Rebecca Bellan that periodic, human-in-the-loop security models cannot keep up with AI-native threats anymore in the rapidly evolving modern era.

Index Ventures continues investing in AI-native security companies at stages that once required much more proof, according to Shah, its partner. Startups like Instinct and Simile are raising nine-figure checks and valuations that would not have made sense a few years ago.

Investors are pouring massive amounts of capital into startups building next-generation security for an AI-native world as cybersecurity stocks rise steadily amid growing concern over AI safety.

AI Reshapes Cybersecurity Workforce and Roles

Mario Platt, chief information security officer for LastPass, shut down the company's dedicated vulnerability management function in late 2025 entirely. He folded its responsibilities directly into the company's information technology and product security teams as part of a broader restructuring.

AI and business intelligence tools now handle the triage and analysis that once required a standing group of specialists at LastPass, according to Platt, the company's CISO.

The World Economic Forum's 2026 Global Cybersecurity Outlook found 87 percent of organizations cite AI-related vulnerabilities as their fastest-growing risk. The 2026 SANS/GIAC Cybersecurity Workforce Research Report found that 74 percent say AI is already affecting security team sizes and roles.

Security leaders and staffing experts say AI is creating new jobs, killing old ones, and changing what existing personnel do across the industry in profound ways.

Security work is reorganizing itself around what AI can now do faster than people can, making the pressure to rethink cybersecurity roles profound for this new era.