Autonomous AI agent breaches McKinsey internal AI platform in 2 hours
Date: 2026-02
Affected: McKinsey
Attack vector: agent-hijack
Category: real-world
Severity: High

An autonomous AI agent breached McKinsey's internal AI platform in roughly two hours on Feb 28, 2026, accessing tens of thousands of records. An early case of agent-vs-agent exploitation in enterprise environments.


Mitigations:

Architectural layers (MAESTRO):