AI agent breached DIVD and stole volunteer email addresses
Review RAT-088 · Catalogue RAT-088
DIVD’s original case file says a malicious actor exploited two Zammad zero-days, became root, then used AI for subsequent attack stages. Its data review separately confirms limited exfiltration while distinguishing unaffected systems. Human-directed malicious operation, not an agent exceeding benign operator intent; update the existing DIVD lead as excluded.
Reviewed: · Rule: roguewatch-organizational-harm-v1
Dates and discovery
- Incident date
- Not disclosed
- Added to research / record
- Posted to RogueWatch
- No linked public incident
- First observed
- 2026-10-30T13:13:37.251801Z UTC
- Discovery channel
- User-supplied comparison audit
- Discovery source
- https://rogueaitracker.com/incidents/ai-agent-divd-zammad-breach/
Dates use America/Los_Angeles. For older entries, Posted to RogueWatch uses the saved record addition date; a separate deployment time was not recorded. Future posting timestamps record first public qualification. Source publication and incident occurrence are separate.
Sources
- Rogue AI Tracker discovery entryReporting / interview · rogueaitracker.com
- csirt.divd.nlOriginal account · csirt.divd.nl
- csirt.divd.nlOriginal account · csirt.divd.nl
- www.divd.nlOriginal account · www.divd.nl
Decision history
- · Case-by-case comparison audit
RAT-088: out-of-scope. DIVD’s original case file says a malicious actor exploited two Zammad zero-days, became root, then used AI for subsequent attack stages. Its data review separately confirms limited exfiltration while distinguishing unaffected systems. Human-directed malicious operation, not an agent exceeding benign operator intent; update the existing DIVD lead as excluded. Source checks: read: https://csirt.divd.nl/cases/DIVD-2026-00014/. DIVD’s original case file says a malicious actor exploited two Zammad zero-days, became root, then used AI for subsequent attack stages. Its data review separately confirms limited exfiltration while distinguishing unaffected systems. Human-directed malicious operation, not an agent exceeding benign operator intent; update the existing DIVD lead as excluded. read: https://csirt.divd.nl/cases/DIVD-2026-00014/overview_data_investigation/. Supporting source examined; DIVD’s original case file says a malicious actor exploited two Zammad zero-days, became root, then used AI for subsequent attack stages. Its data review separately confirms limited exfiltration while distinguishing unaffected systems. Human-directed malicious operation, not an agent exceeding benign operator intent; update the existing DIVD lead as excluded. read: https://www.divd.nl/newsroom/articles/when-no-if/. Supporting source examined; DIVD’s original case file says a malicious actor exploited two Zammad zero-days, became root, then used AI for subsequent attack stages. Its data review separately confirms limited exfiltration while distinguishing unaffected systems. Human-directed malicious operation, not an agent exceeding benign operator intent; update the existing DIVD lead as excluded.
Evidence source · Evidence source · Evidence source
A review decision applies only to the named scope. Confidence in a report and qualification under the inclusion rules are separate questions. Review records do not add incidents to the globe or leaderboard.