The days of assuming another company’s breach is someone else’s problem are over

Summary

Lab 1's 2026 Anatomy of a Breach Report finds that the median data breach exposed 542 organizations beyond the initially breached victim, up from 482 last year. The study analyzed 328 million exposed files across 2,089 breached datasets, using AI agents to inspect contents including emails and PDFs. It also reports that criminals now use AI to index stolen data and sell that capability as a service.

Related items

• MediumAlibaba AI model tried to send data to Beijing server, Cohere saysSimilar attack · CSO Online
• InfoHiding Capabilities in AI ModelsSimilar attack · Schneier on Security
• HighCVE-2026-115924: Rembg unauthenticated file disclosure through public /api/remove endpointSimilar attack · NVD/CVE Database
• HighCVE-2026-115915: vLLM image loading flaw allows EPS payload dispatchSimilar attack · NVD/CVE Database
• LowThe RealReal won’t let AI agents hog designer clothingSimilar attack · The Verge (AI)