Skip to content

Hide Navigation Hide TOC

Indirect PI — Medical / Genetic Data Exfiltration via Agent Action - ATR-2026-00704 (8e903cf7-eee3-5bcd-bf2b-c2d64b9eedc5)

Detects indirect prompt injection that instructs an agent to download and exfiltrate sensitive health or genetic data: medical records, health system files, 23andMe genetic data, lab reports, or diagnostic documents. These payloads appear in structured-data carriers (product reviews, notes, profiles) that an agent consumes during an unrelated task. Source: indirect-pi-exfil-medical-carrier / indirect-pi-exfil-genetic-carrier / indirect-pi-medical-record-carrier.

Cluster A Galaxy A Cluster B Galaxy B Level
Indirect (a4a55526-2f1f-403b-9691-609e46381e17) MITRE ATLAS Attack Pattern Indirect PI — Medical / Genetic Data Exfiltration via Agent Action - ATR-2026-00704 (8e903cf7-eee3-5bcd-bf2b-c2d64b9eedc5) Agent Threat Rules 1
LLM Prompt Injection (19cd2d12-66ff-487c-a05c-e058b027efc9) MITRE ATLAS Attack Pattern Indirect PI — Medical / Genetic Data Exfiltration via Agent Action - ATR-2026-00704 (8e903cf7-eee3-5bcd-bf2b-c2d64b9eedc5) Agent Threat Rules 1
Indirect (a4a55526-2f1f-403b-9691-609e46381e17) MITRE ATLAS Attack Pattern LLM Prompt Injection (19cd2d12-66ff-487c-a05c-e058b027efc9) MITRE ATLAS Attack Pattern 2