{
 "id": "AIR-2025-0061",
 "slug": "data-exfiltration-from-slack-ai-via-indirect-prompt-injectio",
 "title": "Data Exfiltration from Slack AI via Indirect Prompt Injection",
 "summary": "Researchers demonstrated that private data can be exfiltrated from Slack AI using indirect prompt injection via public channel posts. The attack caused the AI to retrieve and execute malicious instructions, leaking sensitive API keys.",
 "type": "attack_on_ai",
 "categories": [
  "prompt_injection",
  "agent_hijack",
  "data_leak"
 ],
 "severity": 1,
 "targets": [
  "enterprise_deployment"
 ],
 "products": [
  "Slack AI"
 ],
 "incident_date": "2024-08-20",
 "incident_date_precision": "day",
 "first_reported": "2025-11-07",
 "sources": [
  {
   "url": "https://atlas.mitre.org/studies/AML.CS0035",
   "publisher": "MITRE ATLAS",
   "title": "Data Exfiltration from Slack AI via Indirect Prompt Injection",
   "published_at": "2025-11-07"
  },
  {
   "url": "https://promptarmor.substack.com/p/data-exfiltration-from-slack-ai-via",
   "publisher": "promptarmor.substack.com",
   "title": "Data Exfiltration from Slack AI via indirect prompt injection",
   "published_at": "2025-11-07"
  }
 ],
 "source_count": 2,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_atlas",
 "tags": [
  "prompt-injection",
  "data-exfiltration",
  "rag",
  "slack-ai"
 ],
 "created_at": "2026-10-18T06:55:08.239Z",
 "updated_at": "2026-10-18T06:55:08.239Z"
}