AI Data Theft

AI data theft refers to the unauthorized acquisition of training data, model parameters, or proprietary datasets used to develop artificial intelligence systems. This poses significant governance risks because stolen data can enable competitors to reverse-engineer models, compromise sensitive information, and violate regulatory requirements around data protection and intellectual property. Organizations must implement robust access controls, encryption, and audit logging to mitigate exposure and maintain compliance with data governance frameworks.

1 item

ResearchGlobal2026-09-08

Google Mandiant: Extortion Crews Now Targeting Proprietary AI Models and Training Data

Google Mandiant's AI Threat Tracker has documented multiple extortion incidents in Q2 2026 where threat actors stole proprietary AI assets, including models, source code, prompts, and research data, then demanded ransoms under threat of public release. Threat group UNC6780 (TeamPCP) has been linked to supply chain attacks on PyPI, npm, and Docker Hub designed to harvest cloud and AI credentials. Affected sectors include healthcare, pharmaceutical, technology, and media organizations in North America and Europe.

Google Mandiant UNC6780 AI data theft extortion supply chain risk model security incident response credential harvesting