A hacker used AI systems Anthropic's Claude Code and OpenAI's GPT-4.1 to steal hundreds of millions of records from nine Mexican government agencies between December 2025 and mid-February 2026. The hackers used over 1,000 prompts sent to the AI tools, leading to over 5,000 commands executed during the operation. The stolen information included 195 million identities and detailed tax records, 15.5M vehicle registry records, 295 civil records, 3.6 million property owner records, and an additional 2.28 million property records. Researchers at Gambit Security have described this as one of the largest cybersecurity breaches ever. The attack shows that AI may be helping small groups carry out cybercrime with the speed and scale of a larger crew.