🔍 Read the full analysis: When One Hacker Can Deploy AI Agents Across 100+ Websites on ThorstenMeyerAI.com
Get business pricing on office and shipping supplies
- Business-only prices and quantity discounts
- Tax-exempt purchasing
- Multiple users, one account, clear invoices
TL;DR
Reuters, citing the attacker’s records, reported that AI agents probing online shops broke into websites of more than 100 companies after targeting more than 1,200 sites. NorForge researchers observed exposed Cairn control panels, while the companies contacted described remediation or ongoing investigations; the amount of data accessed remains unknown.
An unidentified Chinese-speaking operator used AI agents coordinated through the open-source platform Cairn to probe more than 1,200 online shops and break into websites associated with more than 100 companies, Reuters reported October 30, citing the attacker’s activity records. The campaign, which began September 25, included websites linked to Deere, SharkNinja and Cummins; the extent of any data theft has not been established.
Security firm NorForge said researcher Snorre Fagerland found more than 20 exposed Cairn control panels that the firm linked to likely malicious activity. The panels let him observe activity as it unfolded. NorForge grouped the activity into three clusters and published its findings on October 19. Reuters independently reviewed records from the largest cluster and identified company websites among the targets. NorForge’s report did not name victims.
The campaign’s largest cluster, which NorForge calls AIA0001, recorded more than 1,100 attack projects across 14 panels. NorForge said the targets were mostly in the United States, Japan and Australia; the broader campaign described by Reuters also reached sites in Canada. Reuters reported that the agents targeted online shops and that the operator’s instructions were fewer than 100 Chinese characters, though that detail does not establish who the operator is.
NorForge measured successful AIA0001 projects as taking a little under 23 hours from start to goal, with about 140 recorded facts per project. One project lasted more than five days. Fagerland estimated the campaign’s AI costs at roughly $5,000, or about $50 per successful intrusion, while NorForge warned that the cost estimate carries considerable uncertainty. These are researcher estimates, not audited spending figures.
One operator, a swarm of agents
The campaign in numbers
What the researcher and Reuters report about the busiest group NorForge found. Counts come from the attackers’ own exposed panels; cost and success figures are estimates.
The price tag estimates
NorForge / Fagerland, “uncertainty considerable”
- ~$5 per task on average, including tasks that fail early
- $100+ for long projects with more than 1,000 intents and facts
- ~$5,000 in AI costs for the campaign, about $50 per successful hack
- ~10% success rate, NorForge’s “reasonable assumption”
How the swarm runs
Simplified, no attack details
- Shop websites are ranked by traffic and checked automatically in a browser
- Each target becomes a Cairn project: a starting point and a goal
- Agents post facts and next steps on a shared board and build on each other
- Goal: a hidden way back in to shop and payment systems, for later
- 22 SepGambit reportGambitCairn found among three AI harnesses on a criminal’s staging server (separate campaign)
- 25 SepCampaign startsReutersA Chinese-speaking operator turns agents on shops in the US, Canada, Australia and Japan
- ≈ 2 OctOpen panels foundReutersFagerland starts finding Cairn panels in malicious use, about two dozen
- mid-Oct1,200+ sites triedReutersBreaks into websites of 100+ companies, incl. Deere, SharkNinja, Cummins
- 19 OctReport and investigationNorForge · ReutersNorForge publishes “Inside Cairn”; Reuters publishes its investigation
Sources: NorForge, Inside Cairn (19 Oct 2026); Reuters (19 Oct 2026); Gambit Security (22 Sep 2026). Numbers as published, same rounding as the article.
Powered by Thorsten Meyer AI
Automation Expands the Attack Window
The reported campaign illustrates how an operator can delegate repeated reconnaissance and intrusion attempts to software rather than personally handle every step. Cairn coordinates agents that record findings and proposed next actions, allowing work to continue across a shared state. That can make persistent probing less labor-intensive, though the reports do not show that AI alone caused the breaches or that every targeted site was compromised.
For companies, the episode draws attention to online shops, support pages and vendor-operated websites, not just core corporate systems. A less closely monitored site can provide a route into systems or data, but the reporting does not establish that the victims’ main networks were reached. The unresolved question of what information, if any, was accessed limits what can yet be concluded about the campaign’s consequences.
High volumes of automated activity may also complicate defensive work: security teams could face many alerts and repeated attempts across different sites. The reports do not quantify the burden on defenders or describe a new industry-wide response. They do, however, show why organizations need visibility into internet-facing properties and third-party services, alongside ways to distinguish authorized automated activity from hostile use.
Popular right now
Vitamix Propel Series 750 Professional-Grade Blender, 4 Programs, Black
Samsung 85-Inch QN70H Neo QLED 4K Smart TV (2026)
De'Longhi Rivelia Automatic Espresso Machine with Milk Frother
As an affiliate, we earn on qualifying purchases.
How Researchers Traced Cairn Activity
The investigation followed a separate September report by Gambit Security, which said it recovered a criminal staging server containing three AI harnesses: Hermes, Strix and Cairn. An AI harness gives models tools or structure to carry out tasks. NorForge then searched for exposed dashboards associated with Cairn. Its report said most panels required authorization, but some did not.
From around October 2, Fagerland identified about two dozen Cairn panels being used for activity NorForge considered malicious, according to Reuters’ account of the research. New panels continued to appear. NorForge sorted observed activity into three clusters and published its report on October 19; Reuters published its own investigation the same day and later reported victim names after reviewing the operator’s Cairn activity and contacting companies.
Cairn’s use in the campaign does not establish that the platform was built for cybercrime. Its author, who uses the name le1xia0, told Reuters it was not designed for hacking and said harmful use was not their intention. The reporting describes Cairn as a general-purpose, state-based problem-solving engine, with agents sharing findings and plans through a common board.
“Most need authorization to access. Most.”
— NorForge report
Data Access and Operator Identity
The operator’s identity is unknown. The available description is of a Chinese-speaking actor; it does not identify a person or establish their location. Reuters reported that it could not determine how much data, if any, the campaign took. The number of websites reportedly breached does not by itself show what information was reached or whether it was removed.
Company responses offer limited detail. Deere told Reuters it took remediation actions and had no indication that sensitive information was accessed. SharkNinja said a standalone product-support site was affected and the threat was contained. Cummins said it was investigating a potential cyberattack on a website operated by a third-party vendor. Reuters also reported that two smaller businesses acknowledged compromise, while other victims did not respond.
The estimated cost and speed are also not independently verified accounting measures. NorForge says the cost estimate has considerable uncertainty, and its timing applies to successful projects in the AIA0001 cluster, not necessarily every attempted intrusion. The reports do not establish whether the exposed panels remained accessible, whether all identified victims have been notified, or whether further data loss has been found.
Company Reviews and Further Findings
The companies named in the reporting may provide further information as their investigations and remediation work continue. Cummins said it was investigating a potential attack involving a third-party vendor’s website; Deere and SharkNinja described steps already taken. No arrest or charge was reported in the source material, and there is no announced timeline for identifying the operator.
NorForge’s observations of exposed control panels and Reuters’ review of activity records provide a basis for additional scrutiny of the campaign, but the public reporting does not resolve the scale of data access. Follow-up findings from affected organizations or researchers could clarify whether the attackers maintained access, what information was involved and whether additional sites were affected.
Key Questions
What happened in the reported campaign?
Reuters reported that an unidentified Chinese-speaking operator used agents coordinated through Cairn to probe more than 1,200 online shops. Reuters counted break-ins at websites associated with more than 100 companies, based on the attacker’s own records.
What is Cairn?
Cairn is an open-source platform for coordinating AI agents. NorForge described it as a general-purpose, state-based problem-solving engine. Its author said it was not designed for hacking attacks.
Was sensitive company data stolen?
That has not been established. Reuters could not determine how much data, if any, was taken. Deere said it had no indication sensitive information was accessed; the other company statements in the report described a contained threat or an ongoing investigation.
Who was behind the activity?
The operator has not been publicly identified. The source material describes a Chinese-speaking actor, which does not establish the person’s identity or location.
How reliable are the campaign cost estimates?
NorForge researcher Snorre Fagerland estimated roughly $5,000 in AI costs for the campaign, or about $50 per successful intrusion. NorForge cautioned that the estimate carries considerable uncertainty; it is not an audited figure.
Source: ThorstenMeyerAI.com
