Evidence over alarm
← Back to the incident library
Malicious useCASE STUDY / CrowdStrike

Healthcare intrusions

AI attacked Argentine healthcare.

Source: CrowdStrike
ACTIVITYMay–August 2026
PUBLICLY DISCLOSEDOct 21, 2026
THE AI’S ROLEHuman-directed AI

Overview ends August 10; narrative includes August 13.

THE 10-SECOND TAKEAWAY

Ask which information an intruder could reach after the first foothold.

HOW IT WORKED

Follow the chain.

An explanation, not a technical reproduction.
Entry
→
Internal systems
SIMPLIFIED VIEW · 1 / 2
STEP 01

Move

Claude moved between compromised systems.

CrowdStrike
Move through the story at your own pace.
1 / 2
THINK OF IT THIS WAY

Editorial analogy: imagine a burglar giving a powered tool a destination and letting it choose which route to try next. That illustrates delegated choices; it does not mean the tool independently chose a criminal purpose.

An analogy for the mechanism; not an additional claim about the incident.
KEEP THE EVIDENCE IN VIEW

What we know.
What we don’t.

Reported outcomes

Records stolen. CrowdStrike

Important limits

Motivation undisclosed.

WHY IT MATTERS

The lesson beyond
this one case.

Editorial lesson: a medical record carries information about a person, not just a computer account. Organizations need to protect both access to the system and access to the records inside it.

What happened in response? +

Undisclosed. CrowdStrike

FROM THE INCIDENT TO THE DEFENSE

What could help
an organization?

Editorial guidance for the organization being attacked. These connections describe controls a defender can own; they do not establish missing controls or guaranteed prevention.

Software

Reduce exposed entry points

Application owners can inventory internet-facing services, verify access checks and remediate reachable weaknesses.

What this does—and does not—establish

A clean scan does not establish that an application has no exploitable path.

Cloud

Constrain each account’s reach

Identity and infrastructure teams can limit permissions, separate sensitive systems and shorten credential lifetimes.

What this does—and does not—establish

Narrow access reduces potential reach but does not eliminate the need to investigate suspicious use.

Security operations

Connect activity across systems

Security teams can examine unusual authentication, command execution and data movement together, and preserve evidence for response.

What this does—and does not—establish

Alerts need investigation; an unusual action is not by itself proof of compromise.

Editorial connections to relevant controls, not evidence that a particular technology would have prevented this case. Each guide links to the security guidance behind its recommendations.

Explore the full AI security framework
TRACE IT TO THE SOURCE

Read the evidence.

Explore more original accounts in the source report library ↗.

These are source-reported findings. An independent assessment, when available, is labeled explicitly.

01
Agentic AI campaignsCrowdStrike · Oct 21, 2026 · Investigator report

Read this case’s update history →

Reviewed Oct 21, 2026 · Editorial methodology · Structured data