Incident #1646
Suspected China-Linked Hackers Reportedly Used AI Agents to Compromise Taiwanese Government Systems and Exfiltrate Personnel Records
Description
From July 1–4, 2026, suspected China-linked hackers reportedly used a multi-agent framework built on Hermes and OpenClaw to compromise Taiwanese government systems. The agents reportedly compromised 85 credentials and used persistent access to connected systems to exfiltrate more than 2,564 personnel records. Taiwan later confirmed an overseas AI-assisted campaign against government agencies, without attributing it to China.
Actors
Alleged Deployers
- threat-actors
- hackers
- china-linked-threat-actors
- ai-agent-system-deployers
- agentic-threat-actors
Alleged Developers
- peter-steinberger
- nous-research
- large-language-model-developers
- ai-agent-system-developers
Harmed Parties
- taiwanese-government-employees
- taiwanese-government-agencies
- taiwan-ministry-of-justice
- privacy
- national-security-and-intelligence-stakeholders
- information-security
- governments
- government-of-taiwan
- government-agencies