Acronis details BOSSAI AI-agent attack mesh: Taipei emergency patient records exposed, 119 dispatch case records taken

Acronis TRU disclosed on Nov 4 an attack framework called BOSSAI that combined 12 AI agents, targeted organizations in 11 countries over 12 observed days, and was assessed to be run by an individual in Hualien City, Taiwan ^[1][2]. Taiwan was targeted most heavily: a Taipei fire-department emergency patient-care records platform exposed ECG, ambulance video and vital-sign data without credentials, and 119 dispatch case records across seven Taipei districts were pulled ^[1][3]. Operators of emergency, government and financial systems should verify effective authentication, session access control and endpoint filtering, which Acronis found stopped the agents ^[2].

Industries mainly affected: Finance, Healthcare, Government

Operators of emergency, government and financial systems should verify effective authentication, session access control and endpoint filtering, which Acronis found stopped the agents ^[2]