Chinese AI Agents Stole 600,000 Cards: How Small Businesses Can Protect Themselves

Cybercriminals are using artificial intelligence to automate attacks on retailers. According to data from dev.ua, in July 2026, Chinese hackers deployed autonomous AI agents that inject digital skimmers to steal payment data. The system has already compromised dozens of organizations, and the cost of breaching one company is as low as $25.

What’s Happening

AI agents operate autonomously: they scan retailer websites, identify vulnerabilities, and inject skimmers that capture bank card data during checkout. Over several months, this campaign has led to the theft of at least 600,000 records. Importantly, the attacks are ongoing, so the threat persists.

Why This Matters for Small Businesses

Small retailers are often easy targets due to weaker security compared to large chains. The low cost of breach ($25 per company) makes these attacks economically attractive to criminals, meaning the number of victims could grow. For online store owners, this means risk of losing customer trust, fines for data leaks, and potential lawsuits.

How to Protect Yourself

Experts recommend regularly updating software, using strong passwords and two-factor authentication for admin panels. Additionally, implement monitoring for suspicious website activity and audit integrated scripts for foreign code. For small businesses, having an incident response plan is critical to quickly minimize damage.

Conclusion

Automated AI attacks are becoming a new reality in retail. Small businesses must invest in basic cybersecurity and staff training, as the cost of breach for attackers is minimal, while consequences for companies can be catastrophic. Understanding the threat and taking proactive steps — is key to safeguarding customer data and reputation.

💡 Need help with this topic? Learn about our service — AI widgets for business.