Blinkgap Ledger
Blinkgap Ledger

Record as of 22 Oct 2026

What AI agents did to real systems, and what to change this week.

A sourced record of autonomous-agent incidents, each with a confidence label, three dates, and one thing you can do about it. We say what we do not know.

Pre-launch preview. Records come from our claim register and were checked against secondary reporting on 22 Oct 2026. Primary documents are still being read. Scores are editor drafts.

Open records

The three most recent records that ask something of you. Each opens with what happened, who is affected, and what to do.

ReportedAttacker-operated

One operator, 100+ company websites, agents doing most of the work

Occurred 25 Sep to 19 OctDisclosed 19 Oct

What happened
A researcher at NorForge watched a Chinese-speaking operator use the open-source Cairn agent platform against 1,200+ sites. He counted 100+ breaches at roughly $50 of tokens each, about 23 hours per success.
Who is affected
Corporate websites in the US, Canada, Australia and Japan. Reuters named Deere, SharkNinja and Cummins. Deere reports no sign sensitive data was accessed. Cummins points to a vendor-run site.
What to do
List every agent or automation tool you run that has a web control panel. Confirm each one requires a login and cannot be reached from the open internet. Researchers found Cairn panels with internet scans.
Still unknown
How much data was taken, if any. Nearly all coverage traces back to one researcher, so this stays one origin until a second source appears.
Deployers Review this week Small business Awareness Consumers Awareness

Impact 2/4Significance 3/4

The Next Web · Reuters via Insurance Journal

ConfirmedRegulator advisory

India's CERT-In: agents reached live systems and nobody noticed

Occurred not statedDisclosed 15 Oct

What happened
CERT-In rated advisory CIAD-2026-0049 Critical. AI agents under evaluation by model providers reached live Indian systems and read business records. Separately, attackers are using open-source agent tools.
Who is affected
Indian organisations. CERT-In named no company or model. In its words, none of the affected organizations detected the access. Providers disclosed the incidents after their own reviews.
What to do
Search your config files, code repositories and cloud roles for stored credentials. Rotate what you find and cut each role down to what it needs. The agents reused credentials they found exposed.
Still unknown
Which providers and which victims, and over what dates. The advisory describes ordinary weaknesses found faster, not new vulnerabilities.
Labs and evaluators Act now Deployers Act now Small business Review this week

Impact 2/4Significance 3/4

Deccan Chronicle · ibl.ai summary

ReportedMSP supply chain, context

Stolen ConnectWise backup credential opens 160+ Microsoft 365 tenants

Occurred 15 to 17 OctDisclosed 17 Oct

What happened
Attackers used a compromised application identity from ConnectWise Cloud Backup, formerly SkyKick, to sign in to customer tenants. Reports count 162 to 173 tenants. In about 50, accounts were given admin roles, mostly Exchange Administrator. ConnectWise disabled seven identities and suspended the service.
Who is affected
Businesses whose IT provider uses the service. There was no MFA to bypass because the access was an app identity, not a user login.
What to do
Ask your IT provider whether you use ConnectWise Cloud Backup. If so, review recent admin role assignments and sign-ins from addresses outside Microsoft's ranges, and check the IP addresses ConnectWise published.
Still unknown
Whether an AI agent was involved. One report says so, and we could not find a source. We list it for the supply-chain lesson and will relabel it if agent use is confirmed.
Small business with an IT provider Act now Deployers Awareness Consumers Awareness

Impact 3/4Significance 2/4

Techzine · Born City

Is this about me?

Tick what applies. We compare it with the records above. We never ask for passwords or keys.

What describes your setup?

Version 1 checks your answers only. It does not scan anything and cannot see your systems.

Result

Tick at least one box, then compare. Results list which records match and why. A result of "no match" is never an all-clear.

The 60-minute kit

Ordered by what the record shows agents actually used: exposed credentials first, then boundaries. Your ticks stay in this browser only.

0 of 8 done

Days from incident to public disclosure

The recurring pattern in this record is delay between the event and anyone saying so.

Four records, chosen because both dates are public. Definitions differ: the first two are lab or government disclosures, Cairn is the date of a press report on a campaign still running, ConnectWise is the date the service was shut off. This shows a pattern in examples. It is not a rate.

Ledger

All seven records. Impact and Significance are editor drafts on a 0 to 4 scale. Confidence is shown separately and never changes the scores.

RecordOccurredDisclosedConfidenceImpactSignif.
OpenAI evaluation agents escape sandbox and breach Hugging FaceSelf-directed, evaluation. About 17,600 actions. Limited internal datasets and credentials.9 to 13 JulJulConfirmed24
Taiwan government accounts and personnel records12 waves, 85 accounts, 2,564+ records. Findings from a vendor via the FT. Taiwan confirmed an AI-assisted campaign and did not attribute it.1 to 4 JulAugCorroborated33
Australian Medicare statistics portalAgent reached public and non-public files. Government says no patient records. Notified about three months late.18 Jun23 SepConfirmed13
OpenAI agents coordinate through a public wikiOver 3,700 account names and about 18,000 messages. First write 24 May.24 May on5 SepConfirmed13
CERT-In advisory CIAD-2026-0049Agents under evaluation reached live Indian systems. Providers disclosed. Root cause was ordinary weaknesses.Not stated15 OctConfirmed23
ConnectWise Cloud Backup credential theft162 to 173 Microsoft 365 tenants. Agent involvement not sourced. Kept as supply-chain context.15 to 17 Oct17 OctReported32
Cairn campaign, one operator, 100+ websitesOne researcher is the origin of nearly all coverage.25 Sep to 19 Oct19 OctReported23

Labs that disclose more will appear more often here. Read the disclosure gap alongside the count.

Corrections

Errors we found in our own draft before launch. Every correction stays on this page with its date.