AI-Powered Hackers Breach 100+ Sites Including John Deere
AI-driven autonomous agents breached 100+ company websites in a recent hacking campaign.
Why it matters: Legal teams face heightened cyber risks as AI lowers attack costs and automates breaches, increasing liability and compliance complexities under frameworks like GDPR and CCPA.
- Over 1,200 websites were targeted in the campaign from early 2024.
- 100+ companies, including John Deere, SharkNinja, and Cummins, suffered breaches.
- The open-source AI platform Cairn automated attacks, costing ~$50 per breach, totaling about $5,000.
- Each successful breach took about 23 hours of autonomous AI operation on average.
A recent cyberattack campaign used autonomous AI agents operating via an open-source platform called Cairn to breach more than 100 websites, among over 1,200 targeted. Notable victims include John Deere, SharkNinja, and Cummins. This activity was observed in early 2024, signaling a shift in hacker strategies with AI automation.
The Cairn platform orchestrated attacks costing approximately $50 per successful breach, amounting to roughly $5,000 for the whole campaign. The AI agents autonomously executed breaches, averaging 23 hours per intrusion, demonstrating increased efficiency compared to manual hacking.
John Deere confirmed remediation actions with no sensitive data compromise detected. SharkNinja noted the breach occurred on a standalone product support site and was contained quickly. Cummins is investigating a potential incident involving a third-party vendor site.
The Cairn platform's creator, identified as @le1xia0, stressed that the tool was designed for legitimate research, and misuse depends on the operator, not the software itself.
Cybersecurity consultant Snorre Fagerland noted the high sophistication of this AI-enabled attack, stating, "It's not straightforward to come up with solutions like that. It's not script kiddie stuff." He highlighted that AI significantly lowers costs and automates breaches, posing fresh risks for legal teams in managing cyber liabilities and regulatory compliance with frameworks like GDPR and CCPA.
The rise of autonomous AI hacking agents requires corporations and law firms to update their cybersecurity strategies and legal risk management approaches to address threats from AI-driven intrusions.
By the numbers:
- 1,200+ websites targeted — scale of attempted breaches
- 100+ companies breached — including John Deere and SharkNinja
- $50 per successful intrusion — cost of AI-powered attacks
Yes, but: While Cairn's creator emphasizes the platform's intended legitimate use, misuse by hackers poses real cybersecurity and legal risks.
What's next: Legal teams should monitor further developments as AI-enabled cyberattacks evolve and regulators update compliance requirements.