An AI-driven attack campaign, active from early to mid-September 2026, compromised over 27 companies and exfiltrated data from 600,000 credit cards. Utilizing open-source AI tools, the sophisticated operation executed rapid, low-cost cyber incursions, highlighting the increasing complexity of AI in cybercrime.