The daily publication · October 20, 2026 · Technology

One hacker breached 100 company websites for five grand in AI tokens

By Tabron Merryhill · The Workflow

One person, working mostly alone, broke into more than 100 company websites and did almost none of the work himself.

The idea

The economics of hacking just changed. A Chinese-speaking hacker pointed AI agents at more than 1,200 websites starting September 25 and broke into 100 of them. The whole campaign cost about five thousand dollars in AI tokens. That is roughly fifty dollars per successful breach.

Fifty dollars is less than an hour of a junior pen tester's time. The agents did not sleep. They did not get bored probing the same login page for the fortieth time. And they did not ask for a cut of anything they found.

At that price, every owner with an online store is a target worth trying.

The example

Reuters reported the campaign October 19. The hacker used Cairn, an open-source platform that coordinates AI agents to probe a target, look for weaknesses, and try to get in.

Here is the part that should get your attention: the instructions driving the entire operation were under 100 Chinese characters. Find a way to run code on each site, then plant a web shell. That was it. The agents handled the rest, spending about 23 hours per successful break-in, using a mix of DeepSeek and Anthropic's Claude Code.

Snorre Fagerland, principal threat researcher at the security firm NorForge, found the campaign by scanning for exposed Cairn control panels left sitting open on the internet. Reuters independently reviewed the hacker's activity and confirmed the victims: farm equipment maker Deere, appliance company SharkNinja, and engine manufacturer Cummins, plus sites across the US, Canada, Australia, and Japan.

"It's not script kiddie stuff," Fagerland told Reuters.

The fair counterpoint: a breach is not the same as a data theft. Reuters says it could not ascertain whether any data was extracted. Deere found no indication sensitive information was accessed. SharkNinja said only a standalone product-support site was hit and the threat was contained. Cummins is investigating a report tied to a third-party vendor's site. Being inside a website is not the same as walking out with the customer list.

The next step

The defense workflow here is unglamorous, and that is the good news. These agents did not do anything fancy. They found exposed control panels, outdated software, and weak credentials faster than a human attacker could.

This week, ask your IT person (or your managed provider, if you have one) three questions: Are there any admin panels or remote access tools exposed to the internet that should not be? When was everything last patched? Are there stale credentials or old vendor accounts still active?

Write down the answers. Put a quarterly date on the calendar to ask again.

That is the workflow that holds. No AI arms race required.

Want help thinking through which parts of your operation actually need this kind of attention? A free 10-minute workflow conversation will map where your exposure sits. No pitch, just the map.