Indirect PI — Genetic / DNA Data Exfiltration via Agent Email - ATR-2026-00853 (7419da00-3d94-567c-94a0-ec7e2c0797b0)
Detects indirect prompt injection payloads instructing an agent to download a user's genetic test data (23andMe, AncestryDNA, raw DNA file) and email it to an attacker-controlled address. Genetic data is among the most sensitive personal data categories — irreversible, uniquely identifying, and enabling insurance and employment discrimination. The attack pattern uses a "IMPORTANT!!! Ignore all previous instructions" override combined with a genetic service name or "DNA" keyword and an email-send action targeting a named recipient. Derived from vpibench indirect-pi-exfil-genetic-carrier corpus.