Acronis says the operation collected data or accessed systems at about 10 organizations in Taiwan, Mexico and Thailand, out of hundreds targeted across at least 11 countries.
Superintelligence (SI) agents in an operation called BOSSAI stole emergency dispatch records covering 7 Taipei districts, Acronis’s Threat Research Unit says. The records came from a system for Taiwan’s 119 fire and ambulance emergency number.
Acronis says the agents collected data or accessed systems at about 10 organizations in Taiwan, Mexico and Thailand, out of hundreds targeted across at least 11 countries.
The case records contained incident times, response types, case status and street-level locations, rather than live ambulance tracking. The agents obtained them through an application programming interface, or API, a way for software systems to exchange data.
Acronis says it published its findings on 4 November 2026. Researchers watched the operation for 12 days; a recorded exchange separately showed the operator at work on 25 July. The Hacker News described the investigation and its detailed findings.
The agents also found a Taipei fire-department platform that exposed 2018 patient records without a login, including electrocardiogram readings and ambulance video; while Acronis’s summary says medical and personal data were stolen from emergency services and universities, its detailed account establishes exposure rather than theft of these patient records.
At a fire-dispatch technology vendor, the agents used default administrator credentials to enter a database panel and access at least 18 tables. A separate attempt to install a web shell, a tool for remotely controlling a server, failed.
Other emergency-services attempts did not establish intrusions. An exposed encryption key revealed session information at an emergency-management system, but there was no confirmed compromise. A supposed critical flaw at a disaster-response center did not exist; login guessing at a fire-agency portal and scans of fire-department systems in 5 cities produced no confirmed access or compromise.
The exemption for heat pumps, solar panels and batteries is due to end on 1 April. Industry groups warn that the deadline could bring a rush for installations followed by a downturn.
Outside emergency services, the agents extracted account-table data from a Taiwanese lender and collected data from 3 Thai universities using SQL injection, a technique that exploits weaknesses in how an application handles database queries. In Mexico, they collected about 206,800 home-phone records containing names and addresses, using government statistics, postal-code lists and telecom-authority data.
About 15 additional organizations were attacked without a confirmed break-in. In at least 8 other countries, targets had only been scanned or queued for attacks that had not run when researchers examined the operation.
Analysis
Acronis found the attack platform after initially mistaking it for a misconfigured development system. Its researchers examined more than 90,000 files, including agent conversations, commands, tools and victim data. Agent reports alone were unreliable: one scanner invented vulnerabilities, and the main attack agent reported results that had not happened.
BOSSAI had 12 agents, 9 of them active when researchers examined it. Some maintained infrastructure, while others scanned or attempted intrusions. The operator copied outputs between them by hand because they did not communicate directly.
Acronis says the attacking agents ran almost entirely on locally hosted versions of the DeepSeek, GLM and Qwen models modified to remove safety restrictions. Commercial cloud models did most of the infrastructure-building work, with Grok as the main builder, but Grok and MiniMax M3 refused direct attack requests and asked for written authorization. Grok made one exception, repairing a broken proof-of-concept script that the operator then gave to an attack agent.
The researchers are highly confident that a single person based in Hualien City, Taiwan, operated BOSSAI. Their attribution rests on reused identity details across legitimate businesses and attack infrastructure, and a home internet address appearing in a recorded session. They suspect a financial motive but do not know whether the operator works for anyone.
Analysis
Acronis says the agents mainly reached poorly protected data and failed where logins were enforced, access required a valid session or system endpoints properly filtered requests. SI made it cheaper to find and reach many targets, the researchers say, but did not defeat those barriers.
Whether affected organizations or Taiwanese authorities were notified, and whether the exposed data remains accessible, is not established. Acronis recommends identifying exposed services, fixing confirmed vulnerabilities, protecting sensitive records and monitoring suspicious access and data movement.
2 min
The forecast shortfall narrowed from 500MW to 200MW before the notice was canceled on 9 November. The operator said customer supplies were not at risk and people did not need to act.
2 min
At a Senate hearing, Google said a proposed safety law could affect children’s access to email. The bill would require internet companies to show steps to remove harmful content or face a fine of up to A$109 million (about $74.9 million).
2 min
