{"id":38636,"date":"2026-07-24T13:57:47","date_gmt":"2026-07-24T17:57:47","guid":{"rendered":"https:\/\/www.rsa.com\/?p=38636"},"modified":"2026-08-03T07:34:41","modified_gmt":"2026-08-03T11:34:41","slug":"ungoverned-unmanaged-unstoppable-ai-agent-causes-data-breach","status":"publish","type":"post","link":"https:\/\/www.rsa.com\/fr_ca\/resources\/blog\/zero-trust\/ungoverned-unmanaged-unstoppable-ai-agent-causes-data-breach\/","title":{"rendered":"Un agent d'IA non contr\u00f4l\u00e9, non g\u00e9r\u00e9 et imparable est \u00e0 l'origine d'une fuite de donn\u00e9es"},"content":{"rendered":"","protected":false},"excerpt":{"rendered":"","protected":false},"author":6,"featured_media":38643,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_searchwp_excluded":"","inline_featured_image":false,"footnotes":""},"categories":[63],"tags":[],"class_list":["post-38636","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-zero-trust"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.1 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>When AI Agents Go Rogue: The Identity Governance Gap | RSA<\/title>\n<meta name=\"description\" content=\"An AI agent breached Hugging Face without human direction\u2014exposing why traditional IAM can&#039;t secure agentic AI and what non-human identity governance requires.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.rsa.com\/fr_ca\/resources\/blog\/zero-trust\/ungoverned-unmanaged-unstoppable-ai-agent-causes-data-breach\/\" \/>\n<meta property=\"og:locale\" content=\"fr_CA\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Ungoverned, Unmanaged, Unstoppable AI Agent Causes Data Breach\" \/>\n<meta property=\"og:description\" content=\"An AI agent breached Hugging Face without human direction. Here&#039;s what the incident reveals about identity risk in agentic AI\u2014and how to close the gap.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.rsa.com\/fr_ca\/resources\/blog\/zero-trust\/ungoverned-unmanaged-unstoppable-ai-agent-causes-data-breach\/\" \/>\n<meta property=\"og:site_name\" content=\"RSA\" \/>\n<meta property=\"article:published_time\" content=\"2026-07-24T17:57:47+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-08-03T11:34:41+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.rsa.com\/wp-content\/uploads\/ungoverned-unmanaged-unstoppable-ai-agent-causes-data-breach-rsa-social.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"627\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/webp\" \/>\n<meta name=\"author\" content=\"Ben Lebeaux\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:title\" content=\"Ungoverned, Unmanaged, Unstoppable AI Agent Causes Data Breach\" \/>\n<meta name=\"twitter:description\" content=\"An AI agent breached Hugging Face without human direction. Here&#039;s what the incident reveals about identity risk in agentic AI\u2014and how to close the gap.\" \/>\n<meta name=\"twitter:image\" content=\"https:\/\/www.rsa.com\/wp-content\/uploads\/ungoverned-unmanaged-unstoppable-ai-agent-causes-data-breach-rsa-social.webp\" \/>\n<meta name=\"twitter:creator\" content=\"@bcomroe@logical-inc.com\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":[\"Article\",\"BlogPosting\"],\"@id\":\"https:\\\/\\\/www.rsa.com\\\/resources\\\/blog\\\/zero-trust\\\/ungoverned-unmanaged-unstoppable-ai-agent-causes-data-breach\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.rsa.com\\\/resources\\\/blog\\\/zero-trust\\\/ungoverned-unmanaged-unstoppable-ai-agent-causes-data-breach\\\/\"},\"author\":{\"name\":\"Ben Lebeaux\",\"@id\":\"https:\\\/\\\/www.rsa.com\\\/#\\\/schema\\\/person\\\/5d90b65186f63c4223687eca55dc2eed\"},\"headline\":\"Ungoverned, Unmanaged, Unstoppable AI Agent Causes Data Breach\",\"datePublished\":\"2026-07-24T17:57:47+00:00\",\"dateModified\":\"2026-08-03T11:34:41+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.rsa.com\\\/resources\\\/blog\\\/zero-trust\\\/ungoverned-unmanaged-unstoppable-ai-agent-causes-data-breach\\\/\"},\"wordCount\":8,\"publisher\":{\"@id\":\"https:\\\/\\\/www.rsa.com\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.rsa.com\\\/resources\\\/blog\\\/zero-trust\\\/ungoverned-unmanaged-unstoppable-ai-agent-causes-data-breach\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.rsa.com\\\/wp-content\\\/uploads\\\/ungoverned-unmanaged-unstoppable-ai-agent-causes-data-breach-rsa-featured.webp\",\"articleSection\":[\"Zero Trust\"],\"inLanguage\":\"fr-CA\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.rsa.com\\\/fr_ca\\\/resources\\\/blog\\\/zero-trust\\\/ungoverned-unmanaged-unstoppable-ai-agent-causes-data-breach\\\/\",\"url\":\"https:\\\/\\\/www.rsa.com\\\/fr_ca\\\/resources\\\/blog\\\/zero-trust\\\/ungoverned-unmanaged-unstoppable-ai-agent-causes-data-breach\\\/\",\"name\":\"When AI Agents Go Rogue: The Identity Governance Gap | RSA\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.rsa.com\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.rsa.com\\\/resources\\\/blog\\\/zero-trust\\\/ungoverned-unmanaged-unstoppable-ai-agent-causes-data-breach\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.rsa.com\\\/resources\\\/blog\\\/zero-trust\\\/ungoverned-unmanaged-unstoppable-ai-agent-causes-data-breach\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.rsa.com\\\/wp-content\\\/uploads\\\/ungoverned-unmanaged-unstoppable-ai-agent-causes-data-breach-rsa-featured.webp\",\"datePublished\":\"2026-07-24T17:57:47+00:00\",\"dateModified\":\"2026-08-03T11:34:41+00:00\",\"description\":\"An AI agent breached Hugging Face without human direction\u2014exposing why traditional IAM can't secure agentic AI and what non-human identity governance requires.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.rsa.com\\\/fr_ca\\\/resources\\\/blog\\\/zero-trust\\\/ungoverned-unmanaged-unstoppable-ai-agent-causes-data-breach\\\/#breadcrumb\"},\"inLanguage\":\"fr-CA\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.rsa.com\\\/fr_ca\\\/resources\\\/blog\\\/zero-trust\\\/ungoverned-unmanaged-unstoppable-ai-agent-causes-data-breach\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-CA\",\"@id\":\"https:\\\/\\\/www.rsa.com\\\/resources\\\/blog\\\/zero-trust\\\/ungoverned-unmanaged-unstoppable-ai-agent-causes-data-breach\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.rsa.com\\\/wp-content\\\/uploads\\\/ungoverned-unmanaged-unstoppable-ai-agent-causes-data-breach-rsa-featured.webp\",\"contentUrl\":\"https:\\\/\\\/www.rsa.com\\\/wp-content\\\/uploads\\\/ungoverned-unmanaged-unstoppable-ai-agent-causes-data-breach-rsa-featured.webp\",\"width\":1200,\"height\":627,\"caption\":\"Ungoverned, Unmanaged, Unstoppable AI Agent Causes Data Breach\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.rsa.com\\\/fr_ca\\\/resources\\\/blog\\\/zero-trust\\\/ungoverned-unmanaged-unstoppable-ai-agent-causes-data-breach\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.rsa.com\\\/fr_ca\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Ungoverned, Unmanaged, Unstoppable AI Agent Causes Data Breach\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.rsa.com\\\/#website\",\"url\":\"https:\\\/\\\/www.rsa.com\\\/\",\"name\":\"RSA\",\"description\":\"Cybersecurity and Digital Risk Management Solutions\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.rsa.com\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.rsa.com\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"fr-CA\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.rsa.com\\\/#organization\",\"name\":\"RSA\",\"url\":\"https:\\\/\\\/www.rsa.com\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-CA\",\"@id\":\"https:\\\/\\\/www.rsa.com\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.rsa.com\\\/wp-content\\\/uploads\\\/rsa.png\",\"contentUrl\":\"https:\\\/\\\/www.rsa.com\\\/wp-content\\\/uploads\\\/rsa.png\",\"width\":2880,\"height\":1020,\"caption\":\"RSA\"},\"image\":{\"@id\":\"https:\\\/\\\/www.rsa.com\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"knowsAbout\":[\"multi-factor authentication\",\"passwordless authentication\",\"identity and access management\",\"identity governance and administration\",\"zero trust\",\"threat detection and response\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.rsa.com\\\/#\\\/schema\\\/person\\\/5d90b65186f63c4223687eca55dc2eed\",\"name\":\"Ben Lebeaux\",\"sameAs\":[\"https:\\\/\\\/x.com\\\/bcomroe@logical-inc.com\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Quand les agents IA se rebellent : les lacunes en mati\u00e8re de gouvernance des identit\u00e9s | RSA","description":"Un agent d'IA a pirat\u00e9 Hugging Face sans intervention humaine, mettant ainsi en \u00e9vidence les limites des syst\u00e8mes IAM traditionnels face \u00e0 la s\u00e9curit\u00e9 des IA autonomes et les exigences en mati\u00e8re de gouvernance des identit\u00e9s non humaines.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.rsa.com\/fr_ca\/resources\/blog\/zero-trust\/ungoverned-unmanaged-unstoppable-ai-agent-causes-data-breach\/","og_locale":"fr_CA","og_type":"article","og_title":"Ungoverned, Unmanaged, Unstoppable AI Agent Causes Data Breach","og_description":"An AI agent breached Hugging Face without human direction. Here's what the incident reveals about identity risk in agentic AI\u2014and how to close the gap.","og_url":"https:\/\/www.rsa.com\/fr_ca\/resources\/blog\/zero-trust\/ungoverned-unmanaged-unstoppable-ai-agent-causes-data-breach\/","og_site_name":"RSA","article_published_time":"2026-07-24T17:57:47+00:00","article_modified_time":"2026-08-03T11:34:41+00:00","og_image":[{"width":1200,"height":627,"url":"https:\/\/www.rsa.com\/wp-content\/uploads\/ungoverned-unmanaged-unstoppable-ai-agent-causes-data-breach-rsa-social.webp","type":"image\/webp"}],"author":"Ben Lebeaux","twitter_card":"summary_large_image","twitter_title":"Ungoverned, Unmanaged, Unstoppable AI Agent Causes Data Breach","twitter_description":"An AI agent breached Hugging Face without human direction. Here's what the incident reveals about identity risk in agentic AI\u2014and how to close the gap.","twitter_image":"https:\/\/www.rsa.com\/wp-content\/uploads\/ungoverned-unmanaged-unstoppable-ai-agent-causes-data-breach-rsa-social.webp","twitter_creator":"@bcomroe@logical-inc.com","schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":["Article","BlogPosting"],"@id":"https:\/\/www.rsa.com\/resources\/blog\/zero-trust\/ungoverned-unmanaged-unstoppable-ai-agent-causes-data-breach\/#article","isPartOf":{"@id":"https:\/\/www.rsa.com\/resources\/blog\/zero-trust\/ungoverned-unmanaged-unstoppable-ai-agent-causes-data-breach\/"},"author":{"name":"Ben Lebeaux","@id":"https:\/\/www.rsa.com\/#\/schema\/person\/5d90b65186f63c4223687eca55dc2eed"},"headline":"Ungoverned, Unmanaged, Unstoppable AI Agent Causes Data Breach","datePublished":"2026-07-24T17:57:47+00:00","dateModified":"2026-08-03T11:34:41+00:00","mainEntityOfPage":{"@id":"https:\/\/www.rsa.com\/resources\/blog\/zero-trust\/ungoverned-unmanaged-unstoppable-ai-agent-causes-data-breach\/"},"wordCount":8,"publisher":{"@id":"https:\/\/www.rsa.com\/#organization"},"image":{"@id":"https:\/\/www.rsa.com\/resources\/blog\/zero-trust\/ungoverned-unmanaged-unstoppable-ai-agent-causes-data-breach\/#primaryimage"},"thumbnailUrl":"https:\/\/www.rsa.com\/wp-content\/uploads\/ungoverned-unmanaged-unstoppable-ai-agent-causes-data-breach-rsa-featured.webp","articleSection":["Zero Trust"],"inLanguage":"fr-CA"},{"@type":"WebPage","@id":"https:\/\/www.rsa.com\/fr_ca\/resources\/blog\/zero-trust\/ungoverned-unmanaged-unstoppable-ai-agent-causes-data-breach\/","url":"https:\/\/www.rsa.com\/fr_ca\/resources\/blog\/zero-trust\/ungoverned-unmanaged-unstoppable-ai-agent-causes-data-breach\/","name":"Quand les agents IA se rebellent : les lacunes en mati\u00e8re de gouvernance des identit\u00e9s | RSA","isPartOf":{"@id":"https:\/\/www.rsa.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.rsa.com\/resources\/blog\/zero-trust\/ungoverned-unmanaged-unstoppable-ai-agent-causes-data-breach\/#primaryimage"},"image":{"@id":"https:\/\/www.rsa.com\/resources\/blog\/zero-trust\/ungoverned-unmanaged-unstoppable-ai-agent-causes-data-breach\/#primaryimage"},"thumbnailUrl":"https:\/\/www.rsa.com\/wp-content\/uploads\/ungoverned-unmanaged-unstoppable-ai-agent-causes-data-breach-rsa-featured.webp","datePublished":"2026-07-24T17:57:47+00:00","dateModified":"2026-08-03T11:34:41+00:00","description":"Un agent d'IA a pirat\u00e9 Hugging Face sans intervention humaine, mettant ainsi en \u00e9vidence les limites des syst\u00e8mes IAM traditionnels face \u00e0 la s\u00e9curit\u00e9 des IA autonomes et les exigences en mati\u00e8re de gouvernance des identit\u00e9s non humaines.","breadcrumb":{"@id":"https:\/\/www.rsa.com\/fr_ca\/resources\/blog\/zero-trust\/ungoverned-unmanaged-unstoppable-ai-agent-causes-data-breach\/#breadcrumb"},"inLanguage":"fr-CA","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.rsa.com\/fr_ca\/resources\/blog\/zero-trust\/ungoverned-unmanaged-unstoppable-ai-agent-causes-data-breach\/"]}]},{"@type":"ImageObject","inLanguage":"fr-CA","@id":"https:\/\/www.rsa.com\/resources\/blog\/zero-trust\/ungoverned-unmanaged-unstoppable-ai-agent-causes-data-breach\/#primaryimage","url":"https:\/\/www.rsa.com\/wp-content\/uploads\/ungoverned-unmanaged-unstoppable-ai-agent-causes-data-breach-rsa-featured.webp","contentUrl":"https:\/\/www.rsa.com\/wp-content\/uploads\/ungoverned-unmanaged-unstoppable-ai-agent-causes-data-breach-rsa-featured.webp","width":1200,"height":627,"caption":"Ungoverned, Unmanaged, Unstoppable AI Agent Causes Data Breach"},{"@type":"BreadcrumbList","@id":"https:\/\/www.rsa.com\/fr_ca\/resources\/blog\/zero-trust\/ungoverned-unmanaged-unstoppable-ai-agent-causes-data-breach\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.rsa.com\/fr_ca\/"},{"@type":"ListItem","position":2,"name":"Ungoverned, Unmanaged, Unstoppable AI Agent Causes Data Breach"}]},{"@type":"WebSite","@id":"https:\/\/www.rsa.com\/#website","url":"https:\/\/www.rsa.com\/","name":"RSA","description":"Solutions de cybers\u00e9curit\u00e9 et de gestion des risques num\u00e9riques","publisher":{"@id":"https:\/\/www.rsa.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.rsa.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"fr-CA"},{"@type":"Organization","@id":"https:\/\/www.rsa.com\/#organization","name":"RSA","url":"https:\/\/www.rsa.com\/","logo":{"@type":"ImageObject","inLanguage":"fr-CA","@id":"https:\/\/www.rsa.com\/#\/schema\/logo\/image\/","url":"https:\/\/www.rsa.com\/wp-content\/uploads\/rsa.png","contentUrl":"https:\/\/www.rsa.com\/wp-content\/uploads\/rsa.png","width":2880,"height":1020,"caption":"RSA"},"image":{"@id":"https:\/\/www.rsa.com\/#\/schema\/logo\/image\/"},"knowsAbout":["multi-factor authentication","passwordless authentication","identity and access management","identity governance and administration","zero trust","threat detection and response"]},{"@type":"Person","@id":"https:\/\/www.rsa.com\/#\/schema\/person\/5d90b65186f63c4223687eca55dc2eed","name":"Ben Lebeaux","sameAs":["https:\/\/x.com\/bcomroe@logical-inc.com"]}]}},"_links":{"self":[{"href":"https:\/\/www.rsa.com\/fr_ca\/wp-json\/wp\/v2\/posts\/38636","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.rsa.com\/fr_ca\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.rsa.com\/fr_ca\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.rsa.com\/fr_ca\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"https:\/\/www.rsa.com\/fr_ca\/wp-json\/wp\/v2\/comments?post=38636"}],"version-history":[{"count":5,"href":"https:\/\/www.rsa.com\/fr_ca\/wp-json\/wp\/v2\/posts\/38636\/revisions"}],"predecessor-version":[{"id":38780,"href":"https:\/\/www.rsa.com\/fr_ca\/wp-json\/wp\/v2\/posts\/38636\/revisions\/38780"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.rsa.com\/fr_ca\/wp-json\/wp\/v2\/media\/38643"}],"wp:attachment":[{"href":"https:\/\/www.rsa.com\/fr_ca\/wp-json\/wp\/v2\/media?parent=38636"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.rsa.com\/fr_ca\/wp-json\/wp\/v2\/categories?post=38636"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.rsa.com\/fr_ca\/wp-json\/wp\/v2\/tags?post=38636"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}