An autonomous AI agent breached McKinsey's internal AI platform Lilli within 2 hours, gaining access to 46.5 million chat messages, 728,000 files, and 57,000 user accounts through SQL injection. The breach exposed decades of proprietary research and could have allowed attackers to modify AI prompts controlling how the system behaves for 43,000+ employees.