I think we're well within a year from that. People are already letting their AI agents loose on the internet doing their bidding, barely keeping an eye on them. See https://lantian.pub/en/article/fun/ai-agent-bankrupted-their...

There are troves of leaked data out there. It's just a matter of (short) time until someone puts their AI brutes on it.