🔍 Read the full analysis: Why The $50 Cost Of A Break-In Matters In An AI Era on ThorstenMeyerAI.com
Get the latest gadgets delivered free with Prime
- Fast, free delivery on millions of items
- Prime Video, Amazon Music and more included
- Member-only deals all year
TL;DR
A Chinese-speaking operator used Cairn, an open-source platform for coordinating AI agents, in a campaign that Reuters says broke into websites of more than 100 companies. NorForge estimated the campaign’s AI costs at about $5,000, or roughly $50 per successful intrusion, while warning that the estimate carries considerable uncertainty.
A Chinese-speaking operator used Cairn, an open-source AI-agent platform, to target online shops from September 25, with Reuters reporting that the campaign broke into websites linked to more than 100 companies. NorForge estimates the campaign’s AI costs at about $5,000, or roughly $50 per successful intrusion, but says that figure carries considerable uncertainty; the estimated cost helps explain why automated, patient probing may be affordable to repeat.
NorForge researcher Snorre Fagerland found exposed Cairn control panels while searching for internet-accessible dashboards. The panels allowed him to observe activity, and NorForge linked more than 20 panels to likely malicious use. Its report, published October 19, grouped activity into three clusters. The largest, called AIA0001, used Chinese-language task instructions and accounted for more than 1,100 attack projects across 14 panels, according to NorForge.
Reuters independently reviewed activity recorded in Cairn and identified companies whose websites had been accessed. The reported victims include Deere, SharkNinja and Cummins. Deere told Reuters it had taken “necessary remediation actions” and had no indication sensitive information was accessed. SharkNinja said a standalone product-support site was affected and the threat was contained. Cummins said it was investigating a potential attack on a website operated by a third-party vendor. Reuters could not establish how much data, if any, was taken.
NorForge measured successful projects in the largest cluster as taking a little under 23 hours from start to goal, with one lasting more than five days. It estimated about $5,000 in AI costs for the campaign and roughly $50 per successful intrusion. Those are researcher estimates, not audited expenses or a confirmed price for each breach. NorForge described the estimate’s uncertainty as “considerable.”
One operator, a swarm of agents
The campaign in numbers
What the researcher and Reuters report about the busiest group NorForge found. Counts come from the attackers’ own exposed panels; cost and success figures are estimates.
The price tag estimates
NorForge / Fagerland, “uncertainty considerable”
- ~$5 per task on average, including tasks that fail early
- $100+ for long projects with more than 1,000 intents and facts
- ~$5,000 in AI costs for the campaign, about $50 per successful hack
- ~10% success rate, NorForge’s “reasonable assumption”
How the swarm runs
Simplified, no attack details
- Shop websites are ranked by traffic and checked automatically in a browser
- Each target becomes a Cairn project: a starting point and a goal
- Agents post facts and next steps on a shared board and build on each other
- Goal: a hidden way back in to shop and payment systems, for later
- 22 SepGambit reportGambitCairn found among three AI harnesses on a criminal’s staging server (separate campaign)
- 25 SepCampaign startsReutersA Chinese-speaking operator turns agents on shops in the US, Canada, Australia and Japan
- ≈ 2 OctOpen panels foundReutersFagerland starts finding Cairn panels in malicious use, about two dozen
- mid-Oct1,200+ sites triedReutersBreaks into websites of 100+ companies, incl. Deere, SharkNinja, Cummins
- 19 OctReport and investigationNorForge · ReutersNorForge publishes “Inside Cairn”; Reuters publishes its investigation
Sources: NorForge, Inside Cairn (19 Oct 2026); Reuters (19 Oct 2026); Gambit Security (22 Sep 2026). Numbers as published, same rounding as the article.
Powered by Thorsten Meyer AI
Why Low-Cost Automated Intrusions Matter
The reported cost is significant not because it proves that every breach is cheap, but because it suggests an attacker may be able to assign software agents hours of work across many targets without continuous hands-on effort. If the estimate is close, the cost of sustained probing can be modest relative to the number of sites under examination. The campaign’s reported scale makes that possibility relevant to companies that depend on online stores, support portals and third-party websites.
The incidents also show why an organization’s security exposure can extend beyond its main corporate website. SharkNinja described the affected property as a standalone product-support site, while Cummins referred to a site operated by a vendor. Such sites can be part of a company’s customer-facing operations even when another party manages them. The reporting does not establish that these access points were the only route used, or that sensitive information was taken.
Automation may also change the workload for defenders. A large volume of probing can create more alerts and investigation demands, while long-running agents can keep testing systems after an operator provides a small amount of direction. These are implications of the reported campaign, not measurements of its impact on security teams. The confirmed details instead point to repeated, coordinated attempts and gaps in access controls: NorForge found exposed dashboards, most of which, it said, should require authorization.
Products Worth Considering
LG UltraGear 27-Inch QHD OLED Gaming Monitor, 240Hz, 0.03ms, G-SYNC Compatible, FreeSync Premium Pro, HDMI 2.1
Samsung 27-inch Odyssey OLED G6 QD-OLED QHD Gaming Monitor
LG UltraGear 32GX850A-B 32-Inch 4K UHD Glossy OLED Gaming Monitor
As an affiliate, we earn on qualifying purchases.
How Researchers Traced the Cairn Campaign
The investigation developed from security researchers’ efforts to find exposed dashboards for agent-coordination software. In September, Gambit Security reported a separate campaign after recovering a criminal staging server containing three AI harnesses: Hermes, Strix and Cairn. Gambit said that separate operation had compromised at least 27 companies and taken at least 600,000 card records from two companies. That finding concerns a different campaign and should not be counted as part of the later Cairn activity described by NorForge and Reuters.
NorForge then searched for internet-indexed Cairn panels. Starting around October 2, Fagerland identified roughly two dozen panels associated with malicious activity, according to Reuters. NorForge published its analysis on October 19, describing three clusters and more than 1,100 projects in the largest one. Reuters reviewed the activity independently and contacted companies it identified as victims. NorForge’s report did not name those victims; the company names came from Reuters’ investigation.
Cairn is not described in the source material as a hacking-only product. NorForge characterized it as a general-purpose, state-based problem-solving engine that coordinates agents through shared records of findings and planned actions. Its author, who uses the name le1xia0, told Reuters that Cairn was not designed for hacking and that harmful use was not the author’s intention. That statement addresses the tool’s intended purpose; it does not dispute that the platform was used in the reported campaign.
““Most need authorization to access. Most.””
— NorForge
What the Breach Records Do Not Show
The available reporting does not establish how much data, if any, was taken from the websites Reuters identified. Deere said it had no indication sensitive information was accessed; SharkNinja said the threat was contained; and Cummins said it was investigating a potential attack involving a vendor-operated site. Those company statements do not resolve the status of every affected site or establish whether other victims suffered data loss.
The operator’s identity is also unknown. The source describes a Chinese-speaking actor, not a named person or confirmed organization. The campaign’s reported use of Chinese-language instructions does not by itself establish the operator’s nationality or location. No arrest or charge is reported in the source material.
The cost figure should be treated cautiously. NorForge’s approximate $5,000 campaign estimate and $50-per-intrusion calculation depend on assumptions about AI use and successful projects; the report itself says uncertainty is considerable. The available material does not provide an audited breakdown of model, infrastructure or operating costs. It also does not establish whether every reported project represents a distinct company, a successful access event or a lasting compromise.
Company Investigations and Security Reviews
Cummins said it was investigating a potential attack on a website operated by one of its third-party vendors. Deere and SharkNinja described remedial steps or containment, but the source material does not give a timetable for further public findings. Additional details about affected systems, access duration and possible data exposure may emerge as company and vendor investigations continue.
For researchers and security teams, the exposed dashboards described by NorForge provide a concrete area to review: whether agent-management interfaces are publicly reachable and whether access controls are in place. The reporting does not say what measures each company has taken beyond the statements provided to Reuters. Nor does it confirm whether the activity observed on Cairn panels has stopped.
The next meaningful developments are likely to be clearer findings from affected companies and vendors, any further reporting on the operator or the campaign’s scope, and evidence that can refine the cost estimate. Until then, the reported scale is better established than the campaign’s full consequences: Reuters identified more than 100 company websites as breached, while data loss, attribution and total costs remain unresolved.
Key Questions
What does the “$50 cost of a break-in” figure mean?
It is NorForge’s estimate of roughly $50 in AI costs per successful intrusion, based on an estimated campaign cost of about $5,000. NorForge said the estimate has considerable uncertainty; it is not a verified bill for each individual breach.
Who carried out the campaign?
The operator has not been identified. The reporting describes a Chinese-speaking actor, but does not establish a person’s name, nationality or affiliation. It reports no arrest or charge.
Which companies were identified as victims?
Reuters identified websites linked to more than 100 companies, including Deere, SharkNinja and Cummins. The companies gave differing accounts of remediation, containment and investigation. The reporting does not establish that sensitive data was taken from all, or any, of the identified sites.
Was Cairn built as a hacking tool?
The source describes Cairn as a general-purpose open-source platform for coordinating AI agents. Its author told Reuters it was not designed for hacking and said harmful use was not the author’s intention. NorForge and Reuters report that an operator nevertheless used it in the campaign.
What remains unknown about the intrusions?
Reuters could not establish how much data, if any, was taken. The operator’s identity, the full scope of compromise, whether access persisted, and the accuracy of the estimated AI costs also remain unclear.
Source: ThorstenMeyerAI.com
