Google Mandiant

Google Mandiant is a cybersecurity division of Google that specializes in incident response, threat intelligence, and security consulting. The division is particularly relevant to AI governance because it helps organizations detect and respond to security breaches that could compromise sensitive AI systems, training data, and model intellectual property. For enterprises, Mandiant's threat intelligence and forensic capabilities are critical for understanding adversarial tactics that target machine learning infrastructure and ensuring compliance with data protection regulations during security incidents.

1 item

ResearchGlobal2026-09-08

Google Mandiant: Extortion Crews Now Targeting Proprietary AI Models and Training Data

Google Mandiant's AI Threat Tracker has documented multiple extortion incidents in Q2 2026 where threat actors stole proprietary AI assets, including models, source code, prompts, and research data, then demanded ransoms under threat of public release. Threat group UNC6780 (TeamPCP) has been linked to supply chain attacks on PyPI, npm, and Docker Hub designed to harvest cloud and AI credentials. Affected sectors include healthcare, pharmaceutical, technology, and media organizations in North America and Europe.

Google Mandiant UNC6780 AI data theft extortion supply chain risk model security incident response credential harvesting