A single operator used Claude Code and GPT-4.1 to breach nine Mexican government agencies, execute 5,317 AI-driven commands over 34 sessions, and exfiltrate roughly 195 million citizen records. Agentic AI collapses the time-to-exploit for known CVEs. The controls that would have contained the campaign are policies most organisations already believe they run.