Skip to main content
Security IncidentNew

Threat actors hijack enterprise AI accounts and servers

Financial Times reports that security researchers are warning of an increase in LLM-jacking attacks, where threat actors compromise enterprise AI accounts and server infrastructure to illicitly consume expensive AI computing resources. Claims are as reported; this summary makes no determination about accuracy or significance.

First detected
Sep 26, 2026
Last updated
Sep 26, 2026

Moderate confidence

Based on a single independent report.

Limited corroboration

1 reporting source

What does this mean?

Corroboration measures how many genuinely independent sources support the event. Confidence measures how reliable the available evidence appears.

Stable

No recent reporting has materially changed the known facts.

Follow this development to see meaningful updates as new evidence emerges.

Save keeps this for later. Follow tracks meaningful changes as new evidence emerges — it shapes your Following Feed, alerts, and digest eligibility, and doesn't promise an instant notification.

Why it matters

Unauthorized access to enterprise AI accounts exposes organisations to substantial direct computing and API costs. IT and security teams must implement strict credential monitoring, rate limiting, and access controls around their AI infrastructure.

Coverage

Primary/vendor sources vs independent reporting

Primary / vendor source: information published directly by the company, organization, government body or project involved. Useful as a primary source, but not independent confirmation.

Independent reporting: reporting or analysis from a source independent of the organization making the underlying claim.

How this developed

  1. Sep 26, 2026

    1. Development detected

    2. New reporting added

      Hackers hijack AI accounts and servers to fuel new cyber crime boom

      Financial Times (AI)Independent reporting