🔍 Read the full analysis: What One Hacker And AI Agents Can Mean For 100+ Companies on ThorstenMeyerAI.com
Prime made for students and young adults
- Fast, free delivery for dorm and study essentials
- Prime Video and Amazon Music included
- Member-only deals
TL;DR
An unidentified Chinese-speaking operator used the open-source Cairn platform to coordinate AI agents that probed more than 1,200 websites, with Reuters reporting breaches at websites of more than 100 companies. Victim companies reported remediation or investigations, but the amount of data accessed or taken has not been established.
An unidentified Chinese-speaking operator used the open-source Cairn platform to coordinate AI agents that probed online shops and broke into websites associated with more than 100 companies, Reuters reported on October 19, citing the campaign’s records and its own review. The companies named include Deere, SharkNinja and Cummins; how much data, if any, was taken remains unknown.
According to Reuters and security firm NorForge, the activity began on September 25 and targeted online shops in the United States, Canada, Australia and Japan. By mid-October, the agents had tried more than 1,200 sites. Reuters identified more than 100 company websites among the reported break-ins by reviewing activity recorded in the attacker’s Cairn panels. NorForge’s report, published October 19, described malicious use of the platform but did not name victims.
NorForge researcher Snorre Fagerland found internet-accessible Cairn control panels, including some without passwords. He identified more than 20 panels that the firm linked to likely malicious activity. The operator’s largest activity cluster, labeled AIA0001 by NorForge, recorded more than 1,100 attack projects across 14 panels, mainly targeting the United States, Japan and Australia. Those figures describe projects and panels, not a confirmed count of successful intrusions.
The companies gave Reuters differing updates. Deere said it took “necessary remediation actions” and had no indication that sensitive information was accessed. SharkNinja said a standalone product-support site was affected and the threat was contained. Cummins said it was investigating a potential attack on a website run by a third-party vendor. Reuters reported that it could not establish how much information, if any, was taken.
One operator, a swarm of agents
The campaign in numbers
What the researcher and Reuters report about the busiest group NorForge found. Counts come from the attackers’ own exposed panels; cost and success figures are estimates.
The price tag estimates
NorForge / Fagerland, “uncertainty considerable”
- ~$5 per task on average, including tasks that fail early
- $100+ for long projects with more than 1,000 intents and facts
- ~$5,000 in AI costs for the campaign, about $50 per successful hack
- ~10% success rate, NorForge’s “reasonable assumption”
How the swarm runs
Simplified, no attack details
- Shop websites are ranked by traffic and checked automatically in a browser
- Each target becomes a Cairn project: a starting point and a goal
- Agents post facts and next steps on a shared board and build on each other
- Goal: a hidden way back in to shop and payment systems, for later
- 22 SepGambit reportGambitCairn found among three AI harnesses on a criminal’s staging server (separate campaign)
- 25 SepCampaign startsReutersA Chinese-speaking operator turns agents on shops in the US, Canada, Australia and Japan
- ≈ 2 OctOpen panels foundReutersFagerland starts finding Cairn panels in malicious use, about two dozen
- mid-Oct1,200+ sites triedReutersBreaks into websites of 100+ companies, incl. Deere, SharkNinja, Cummins
- 19 OctReport and investigationNorForge · ReutersNorForge publishes “Inside Cairn”; Reuters publishes its investigation
Sources: NorForge, Inside Cairn (19 Oct 2026); Reuters (19 Oct 2026); Gambit Security (22 Sep 2026). Numbers as published, same rounding as the article.
Powered by Thorsten Meyer AI
Automated Probing Raises Defensive Costs
The report points to a change in the economics of intrusion attempts: software agents can keep probing targets over extended periods while requiring relatively little attention from an operator. NorForge measured successful AIA0001 projects as taking a little under 23 hours from start to goal on average, with one project running for more than five days. Researcher Snorre Fagerland estimated the campaign’s AI costs at roughly $5,000 overall, or about $50 per successful hack, while NorForge cautioned that the estimate carries considerable uncertainty.
For defenders, the concern is not only the number of targets but also the possible strain of handling a high volume of automated activity. The reported campaign focused on online shops and related infrastructure, including sites that may be operated by vendors rather than by a company itself. That can complicate ownership, incident response and decisions about which systems to check. The reports do not establish that the agents can bypass security on their own in every case; they document this operator’s use of an agent platform in a particular campaign.
The reports also raise a practical security question about exposed control panels. Cairn is a general-purpose agent platform, not a tool described by its developer as built for hacking. But an unauthenticated management interface can expose activity and control functions to outsiders. The open panels helped researchers observe the campaign, while also showing how weakly protected agent infrastructure can become part of a security incident.
Popular right now
TCL QM64L 85-Inch QD-Mini LED 4K Smart Fire TV
Vitamix Propel Series 510 Professional-Grade Blender, 3 Programs, Black
Bose QuietComfort True Wireless Earbuds with Active Noise Cancellation, Black
As an affiliate, we earn on qualifying purchases.
From Exposed Cairn Panels to Victims
The investigation followed a September report from Gambit Security describing a separate agent-driven campaign. Gambit said it found three AI “harnesses”—programs that allow models to take actions—including Cairn, and documented at least 27 companies compromised. It also reported that at least 600,000 card records were taken from two of those companies. That campaign is distinct from the activity Reuters and NorForge described; the figures should not be combined.
After Gambit’s report, Fagerland searched for exposed Cairn dashboards using internet-indexing services. NorForge said most dashboards it encountered required authorization, but some did not. From around October 2, Fagerland identified roughly two dozen panels associated with malicious activity, with new ones appearing later. NorForge grouped the activity into three clusters and published its findings on October 19; Reuters published its investigation the same day.
Cairn coordinates agents through shared records of what they have found and what they plan to do next. The platform’s author, who uses the name le1xia0, told Reuters that Cairn was not designed for hacking and that harmful use was not the author’s intention. NorForge likewise describes Cairn as a general state-based problem-solving engine. The reported campaign reflects how an operator used the software, not proof that the platform itself was created for criminal activity.
““Cairn was not designed for hacking attacks. If it is used to carry out harmful hacking attacks, that is not my intention.””
— Cairn author le1xia0, quoted by Reuters
Data Access and Attribution Remain Open
The operator’s identity has not been established publicly. The source material describes the actor as Chinese-speaking; that does not confirm the person’s nationality, location or identity. No arrest or criminal charge is reported. The campaign’s records and researcher observations provide evidence of the activity, but they do not settle every question about who directed it or how the operator obtained access.
It is also unclear what information was viewed, copied or retained from the affected websites. Deere said it had no indication sensitive information was accessed, while SharkNinja described a hit on a standalone support site and Cummins said it was investigating a potential incident involving a vendor-operated website. Reuters could not establish whether data was taken or quantify any exposure. NorForge’s cost figure is an estimate, and the report itself characterizes its uncertainty as considerable.
The full victim list has not been published in the cited NorForge report. Reuters said it identified companies by independently reviewing Cairn activity and contacting potential victims; two smaller businesses acknowledged compromise, while other companies did not respond. The available accounts do not confirm that every site the agents probed was breached.
Company Reviews and Security Checks
The immediate next step for affected organizations is to determine which websites and systems were accessed, whether any information was exposed, and whether vendor-operated services connect to other company infrastructure. Cummins said it was investigating; the other company updates reported to Reuters describe remediation or containment, but do not resolve the broader data questions.
Further findings may come from company disclosures, incident investigations or additional reporting on the attacker’s records. For now, the public evidence supports a large, agent-assisted campaign and reported breaches at websites linked to more than 100 companies, but not a complete accounting of victims, data loss or the operator’s identity.
Key Questions
What happened in the reported campaign?
An unidentified Chinese-speaking operator used Cairn, an open-source platform for coordinating AI agents, to probe online shops. Reuters reported that the activity reached more than 1,200 sites and included break-ins at websites associated with more than 100 companies.
Which companies were named?
Reuters named Deere, SharkNinja and Cummins among the affected companies. Deere reported remediation and no indication that sensitive information was accessed; SharkNinja said a standalone product-support site was hit; Cummins said it was investigating a potential attack involving a vendor-operated website.
Was customer or company data stolen?
That has not been established for this campaign. Reuters could not determine how much data, if any, was taken. Deere reported no indication of access to sensitive information, but the available reports do not provide a complete assessment across all affected websites.
Who was behind the activity?
The operator’s identity is unknown. The reports describe the actor as Chinese-speaking, but do not establish nationality or location. No arrest or charge is reported in the source material.
Is the Cairn platform itself a hacking tool?
Cairn is described as a general-purpose platform that coordinates AI agents. Its author told Reuters it was not designed for hacking attacks. The reporting concerns its use by an operator in this campaign, not proof that the platform was created for criminal purposes.
Source: ThorstenMeyerAI.com
