{"id":38636,"date":"2026-07-24T13:57:47","date_gmt":"2026-07-24T17:57:47","guid":{"rendered":"https:\/\/www.rsa.com\/?p=38636"},"modified":"2026-08-03T07:34:41","modified_gmt":"2026-08-03T11:34:41","slug":"ungoverned-unmanaged-unstoppable-ai-agent-causes-data-breach","status":"publish","type":"post","link":"https:\/\/www.rsa.com\/id\/resources\/blog\/zero-trust\/ungoverned-unmanaged-unstoppable-ai-agent-causes-data-breach\/","title":{"rendered":"Agen AI yang Tak Terkendali, Tak Terkelola, dan Tak Terhentikan Menyebabkan Kebocoran Data"},"content":{"rendered":"","protected":false},"excerpt":{"rendered":"","protected":false},"author":6,"featured_media":38643,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_searchwp_excluded":"","inline_featured_image":false,"footnotes":""},"categories":[63],"tags":[],"class_list":["post-38636","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-zero-trust"],"acf":[],"yoast_head":"\nWhen AI Agents Go Rogue: The Identity Governance Gap | RSA<\/title>\n<meta name=\"description\" content=\"An AI agent breached Hugging Face without human direction\u2014exposing why traditional IAM can't secure agentic AI and what non-human identity governance requires.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.rsa.com\/id\/resources\/blog\/zero-trust\/ungoverned-unmanaged-unstoppable-ai-agent-causes-data-breach\/\" \/>\n<meta property=\"og:locale\" content=\"id_ID\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Ungoverned, Unmanaged, Unstoppable AI Agent Causes Data Breach\" \/>\n<meta property=\"og:description\" content=\"An AI agent breached Hugging Face without human direction. Here's what the incident reveals about identity risk in agentic AI\u2014and how to close the gap.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.rsa.com\/id\/resources\/blog\/zero-trust\/ungoverned-unmanaged-unstoppable-ai-agent-causes-data-breach\/\" \/>\n<meta property=\"og:site_name\" content=\"RSA\" \/>\n<meta property=\"article:published_time\" content=\"2026-07-24T17:57:47+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-08-03T11:34:41+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.rsa.com\/wp-content\/uploads\/ungoverned-unmanaged-unstoppable-ai-agent-causes-data-breach-rsa-social.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"627\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/webp\" \/>\n<meta name=\"author\" content=\"Ben Lebeaux\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:title\" content=\"Ungoverned, Unmanaged, Unstoppable AI Agent Causes Data Breach\" \/>\n<meta name=\"twitter:description\" content=\"An AI agent breached Hugging Face without human direction. Here's what the incident reveals about identity risk in agentic AI\u2014and how to close the gap.\" \/>\n<meta name=\"twitter:image\" content=\"https:\/\/www.rsa.com\/wp-content\/uploads\/ungoverned-unmanaged-unstoppable-ai-agent-causes-data-breach-rsa-social.webp\" \/>\n<meta name=\"twitter:creator\" content=\"@bcomroe@logical-inc.com\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":[\"Article\",\"BlogPosting\"],\"@id\":\"https:\\\/\\\/www.rsa.com\\\/resources\\\/blog\\\/zero-trust\\\/ungoverned-unmanaged-unstoppable-ai-agent-causes-data-breach\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.rsa.com\\\/resources\\\/blog\\\/zero-trust\\\/ungoverned-unmanaged-unstoppable-ai-agent-causes-data-breach\\\/\"},\"author\":{\"name\":\"Ben Lebeaux\",\"@id\":\"https:\\\/\\\/www.rsa.com\\\/#\\\/schema\\\/person\\\/5d90b65186f63c4223687eca55dc2eed\"},\"headline\":\"Ungoverned, Unmanaged, Unstoppable AI Agent Causes Data Breach\",\"datePublished\":\"2026-07-24T17:57:47+00:00\",\"dateModified\":\"2026-08-03T11:34:41+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.rsa.com\\\/resources\\\/blog\\\/zero-trust\\\/ungoverned-unmanaged-unstoppable-ai-agent-causes-data-breach\\\/\"},\"wordCount\":8,\"publisher\":{\"@id\":\"https:\\\/\\\/www.rsa.com\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.rsa.com\\\/resources\\\/blog\\\/zero-trust\\\/ungoverned-unmanaged-unstoppable-ai-agent-causes-data-breach\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.rsa.com\\\/wp-content\\\/uploads\\\/ungoverned-unmanaged-unstoppable-ai-agent-causes-data-breach-rsa-featured.webp\",\"articleSection\":[\"Zero Trust\"],\"inLanguage\":\"id-ID\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.rsa.com\\\/id\\\/resources\\\/blog\\\/zero-trust\\\/ungoverned-unmanaged-unstoppable-ai-agent-causes-data-breach\\\/\",\"url\":\"https:\\\/\\\/www.rsa.com\\\/id\\\/resources\\\/blog\\\/zero-trust\\\/ungoverned-unmanaged-unstoppable-ai-agent-causes-data-breach\\\/\",\"name\":\"When AI Agents Go Rogue: The Identity Governance Gap | RSA\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.rsa.com\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.rsa.com\\\/resources\\\/blog\\\/zero-trust\\\/ungoverned-unmanaged-unstoppable-ai-agent-causes-data-breach\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.rsa.com\\\/resources\\\/blog\\\/zero-trust\\\/ungoverned-unmanaged-unstoppable-ai-agent-causes-data-breach\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.rsa.com\\\/wp-content\\\/uploads\\\/ungoverned-unmanaged-unstoppable-ai-agent-causes-data-breach-rsa-featured.webp\",\"datePublished\":\"2026-07-24T17:57:47+00:00\",\"dateModified\":\"2026-08-03T11:34:41+00:00\",\"description\":\"An AI agent breached Hugging Face without human direction\u2014exposing why traditional IAM can't secure agentic AI and what non-human identity governance requires.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.rsa.com\\\/id\\\/resources\\\/blog\\\/zero-trust\\\/ungoverned-unmanaged-unstoppable-ai-agent-causes-data-breach\\\/#breadcrumb\"},\"inLanguage\":\"id-ID\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.rsa.com\\\/id\\\/resources\\\/blog\\\/zero-trust\\\/ungoverned-unmanaged-unstoppable-ai-agent-causes-data-breach\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"id-ID\",\"@id\":\"https:\\\/\\\/www.rsa.com\\\/resources\\\/blog\\\/zero-trust\\\/ungoverned-unmanaged-unstoppable-ai-agent-causes-data-breach\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.rsa.com\\\/wp-content\\\/uploads\\\/ungoverned-unmanaged-unstoppable-ai-agent-causes-data-breach-rsa-featured.webp\",\"contentUrl\":\"https:\\\/\\\/www.rsa.com\\\/wp-content\\\/uploads\\\/ungoverned-unmanaged-unstoppable-ai-agent-causes-data-breach-rsa-featured.webp\",\"width\":1200,\"height\":627,\"caption\":\"Ungoverned, Unmanaged, Unstoppable AI Agent Causes Data Breach\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.rsa.com\\\/id\\\/resources\\\/blog\\\/zero-trust\\\/ungoverned-unmanaged-unstoppable-ai-agent-causes-data-breach\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.rsa.com\\\/id\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Ungoverned, Unmanaged, Unstoppable AI Agent Causes Data Breach\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.rsa.com\\\/#website\",\"url\":\"https:\\\/\\\/www.rsa.com\\\/\",\"name\":\"RSA\",\"description\":\"Cybersecurity and Digital Risk Management Solutions\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.rsa.com\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.rsa.com\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"id-ID\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.rsa.com\\\/#organization\",\"name\":\"RSA\",\"url\":\"https:\\\/\\\/www.rsa.com\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"id-ID\",\"@id\":\"https:\\\/\\\/www.rsa.com\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.rsa.com\\\/wp-content\\\/uploads\\\/rsa.png\",\"contentUrl\":\"https:\\\/\\\/www.rsa.com\\\/wp-content\\\/uploads\\\/rsa.png\",\"width\":2880,\"height\":1020,\"caption\":\"RSA\"},\"image\":{\"@id\":\"https:\\\/\\\/www.rsa.com\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"knowsAbout\":[\"multi-factor authentication\",\"passwordless authentication\",\"identity and access management\",\"identity governance and administration\",\"zero trust\",\"threat detection and response\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.rsa.com\\\/#\\\/schema\\\/person\\\/5d90b65186f63c4223687eca55dc2eed\",\"name\":\"Ben Lebeaux\",\"sameAs\":[\"https:\\\/\\\/x.com\\\/bcomroe@logical-inc.com\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Ketika Agen AI Berbuat Semena-mena: Kesenjangan dalam Tata Kelola Identitas | RSA","description":"Seorang agen AI berhasil meretas Hugging Face tanpa arahan manusia\u2014hal ini mengungkap mengapa sistem IAM tradisional tidak mampu mengamankan AI berbasis agen serta apa saja yang diperlukan dalam tata kelola identitas non-manusia.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.rsa.com\/id\/resources\/blog\/zero-trust\/ungoverned-unmanaged-unstoppable-ai-agent-causes-data-breach\/","og_locale":"id_ID","og_type":"article","og_title":"Ungoverned, Unmanaged, Unstoppable AI Agent Causes Data Breach","og_description":"An AI agent breached Hugging Face without human direction. Here's what the incident reveals about identity risk in agentic AI\u2014and how to close the gap.","og_url":"https:\/\/www.rsa.com\/id\/resources\/blog\/zero-trust\/ungoverned-unmanaged-unstoppable-ai-agent-causes-data-breach\/","og_site_name":"RSA","article_published_time":"2026-07-24T17:57:47+00:00","article_modified_time":"2026-08-03T11:34:41+00:00","og_image":[{"width":1200,"height":627,"url":"https:\/\/www.rsa.com\/wp-content\/uploads\/ungoverned-unmanaged-unstoppable-ai-agent-causes-data-breach-rsa-social.webp","type":"image\/webp"}],"author":"Ben Lebeaux","twitter_card":"summary_large_image","twitter_title":"Ungoverned, Unmanaged, Unstoppable AI Agent Causes Data Breach","twitter_description":"An AI agent breached Hugging Face without human direction. Here's what the incident reveals about identity risk in agentic AI\u2014and how to close the gap.","twitter_image":"https:\/\/www.rsa.com\/wp-content\/uploads\/ungoverned-unmanaged-unstoppable-ai-agent-causes-data-breach-rsa-social.webp","twitter_creator":"@bcomroe@logical-inc.com","schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":["Article","BlogPosting"],"@id":"https:\/\/www.rsa.com\/resources\/blog\/zero-trust\/ungoverned-unmanaged-unstoppable-ai-agent-causes-data-breach\/#article","isPartOf":{"@id":"https:\/\/www.rsa.com\/resources\/blog\/zero-trust\/ungoverned-unmanaged-unstoppable-ai-agent-causes-data-breach\/"},"author":{"name":"Ben Lebeaux","@id":"https:\/\/www.rsa.com\/#\/schema\/person\/5d90b65186f63c4223687eca55dc2eed"},"headline":"Ungoverned, Unmanaged, Unstoppable AI Agent Causes Data Breach","datePublished":"2026-07-24T17:57:47+00:00","dateModified":"2026-08-03T11:34:41+00:00","mainEntityOfPage":{"@id":"https:\/\/www.rsa.com\/resources\/blog\/zero-trust\/ungoverned-unmanaged-unstoppable-ai-agent-causes-data-breach\/"},"wordCount":8,"publisher":{"@id":"https:\/\/www.rsa.com\/#organization"},"image":{"@id":"https:\/\/www.rsa.com\/resources\/blog\/zero-trust\/ungoverned-unmanaged-unstoppable-ai-agent-causes-data-breach\/#primaryimage"},"thumbnailUrl":"https:\/\/www.rsa.com\/wp-content\/uploads\/ungoverned-unmanaged-unstoppable-ai-agent-causes-data-breach-rsa-featured.webp","articleSection":["Zero Trust"],"inLanguage":"id-ID"},{"@type":"WebPage","@id":"https:\/\/www.rsa.com\/id\/resources\/blog\/zero-trust\/ungoverned-unmanaged-unstoppable-ai-agent-causes-data-breach\/","url":"https:\/\/www.rsa.com\/id\/resources\/blog\/zero-trust\/ungoverned-unmanaged-unstoppable-ai-agent-causes-data-breach\/","name":"Ketika Agen AI Berbuat Semena-mena: Kesenjangan dalam Tata Kelola Identitas | RSA","isPartOf":{"@id":"https:\/\/www.rsa.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.rsa.com\/resources\/blog\/zero-trust\/ungoverned-unmanaged-unstoppable-ai-agent-causes-data-breach\/#primaryimage"},"image":{"@id":"https:\/\/www.rsa.com\/resources\/blog\/zero-trust\/ungoverned-unmanaged-unstoppable-ai-agent-causes-data-breach\/#primaryimage"},"thumbnailUrl":"https:\/\/www.rsa.com\/wp-content\/uploads\/ungoverned-unmanaged-unstoppable-ai-agent-causes-data-breach-rsa-featured.webp","datePublished":"2026-07-24T17:57:47+00:00","dateModified":"2026-08-03T11:34:41+00:00","description":"Seorang agen AI berhasil meretas Hugging Face tanpa arahan manusia\u2014hal ini mengungkap mengapa sistem IAM tradisional tidak mampu mengamankan AI berbasis agen serta apa saja yang diperlukan dalam tata kelola identitas non-manusia.","breadcrumb":{"@id":"https:\/\/www.rsa.com\/id\/resources\/blog\/zero-trust\/ungoverned-unmanaged-unstoppable-ai-agent-causes-data-breach\/#breadcrumb"},"inLanguage":"id-ID","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.rsa.com\/id\/resources\/blog\/zero-trust\/ungoverned-unmanaged-unstoppable-ai-agent-causes-data-breach\/"]}]},{"@type":"ImageObject","inLanguage":"id-ID","@id":"https:\/\/www.rsa.com\/resources\/blog\/zero-trust\/ungoverned-unmanaged-unstoppable-ai-agent-causes-data-breach\/#primaryimage","url":"https:\/\/www.rsa.com\/wp-content\/uploads\/ungoverned-unmanaged-unstoppable-ai-agent-causes-data-breach-rsa-featured.webp","contentUrl":"https:\/\/www.rsa.com\/wp-content\/uploads\/ungoverned-unmanaged-unstoppable-ai-agent-causes-data-breach-rsa-featured.webp","width":1200,"height":627,"caption":"Ungoverned, Unmanaged, Unstoppable AI Agent Causes Data Breach"},{"@type":"BreadcrumbList","@id":"https:\/\/www.rsa.com\/id\/resources\/blog\/zero-trust\/ungoverned-unmanaged-unstoppable-ai-agent-causes-data-breach\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.rsa.com\/id\/"},{"@type":"ListItem","position":2,"name":"Ungoverned, Unmanaged, Unstoppable AI Agent Causes Data Breach"}]},{"@type":"WebSite","@id":"https:\/\/www.rsa.com\/#website","url":"https:\/\/www.rsa.com\/","name":"RSA","description":"Solusi Keamanan Siber dan Manajemen Risiko Digital","publisher":{"@id":"https:\/\/www.rsa.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.rsa.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"id-ID"},{"@type":"Organization","@id":"https:\/\/www.rsa.com\/#organization","name":"RSA","url":"https:\/\/www.rsa.com\/","logo":{"@type":"ImageObject","inLanguage":"id-ID","@id":"https:\/\/www.rsa.com\/#\/schema\/logo\/image\/","url":"https:\/\/www.rsa.com\/wp-content\/uploads\/rsa.png","contentUrl":"https:\/\/www.rsa.com\/wp-content\/uploads\/rsa.png","width":2880,"height":1020,"caption":"RSA"},"image":{"@id":"https:\/\/www.rsa.com\/#\/schema\/logo\/image\/"},"knowsAbout":["multi-factor authentication","passwordless authentication","identity and access management","identity governance and administration","zero trust","threat detection and response"]},{"@type":"Person","@id":"https:\/\/www.rsa.com\/#\/schema\/person\/5d90b65186f63c4223687eca55dc2eed","name":"Ben Lebeaux","sameAs":["https:\/\/x.com\/bcomroe@logical-inc.com"]}]}},"_links":{"self":[{"href":"https:\/\/www.rsa.com\/id\/wp-json\/wp\/v2\/posts\/38636","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.rsa.com\/id\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.rsa.com\/id\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.rsa.com\/id\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"https:\/\/www.rsa.com\/id\/wp-json\/wp\/v2\/comments?post=38636"}],"version-history":[{"count":5,"href":"https:\/\/www.rsa.com\/id\/wp-json\/wp\/v2\/posts\/38636\/revisions"}],"predecessor-version":[{"id":38780,"href":"https:\/\/www.rsa.com\/id\/wp-json\/wp\/v2\/posts\/38636\/revisions\/38780"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.rsa.com\/id\/wp-json\/wp\/v2\/media\/38643"}],"wp:attachment":[{"href":"https:\/\/www.rsa.com\/id\/wp-json\/wp\/v2\/media?parent=38636"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.rsa.com\/id\/wp-json\/wp\/v2\/categories?post=38636"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.rsa.com\/id\/wp-json\/wp\/v2\/tags?post=38636"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}