The AI agent sent login details and a map of a secure internal network to a third party website.