The Weekly Breach Breakdown Podcast: Why You’re Not Catching All the AI Red Flags - S7E11

Show Transcript

Welcome to the Identity Theft Resource Center’s (ITRC) Weekly Breach Breakdown for April 10, 2026. I'm Tim Walden. Thanks to Sentilink for their continued support of the podcast and the ITRC. 

Each week, we look at the most recent events and trends related to data security and privacy. This week, we are reporting on the recent RSA Conference, where the conversation was dominated by one topic: Artificial Intelligence (AI). While many were talking about all that AI can do, ITRC President James E. Lee was raising the alarm about what we’re leaving behind. 

Lee sat down with Anna Delaney at the RSAC Studio to discuss how AI is fundamentally reshaping identity risk. He started with a bit of a reality check for the industry. Lee asked, "Do you like where we are? Do you like the number of data breaches, scams and fraud? Because if you do, then let’s keep doing what we’re doing." His point is clear: what we’ve done to this point has brought us to a record-breaking crisis, and AI requires us to do something fundamentally different. 

He also offered a witty critique of how we currently view this tech, noting that while many use AI to write better memos or business strategies, "those are all grammar exercises... we're not using its full potential". His concern is that we are so focused on speed that we aren't looking at how to protect the very processes we are making more efficient. 

One of the most startling shifts is the evolution of "The Identity." We usually think of identity theft as a human problem, but Lee points out that we are now creating millions of machine identities. Every AI agent has an identity, and if a criminal takes over a machine identity, the misuse can be much larger than a human compromise. Yet, today, protecting these machine processes is often just an afterthought. 

AI is also making the bad guys much better at their jobs. We used to rely on spotting bad grammar or fuzzy logos to identify a scam. Now, those AI red flags are disappearing. Criminals can now use perfect grammar, perfect tone and even clone entire websites or voices at a very low cost. Since these tools overwhelm traditional defenses, Lee’s advice is simple: Don't play. If you didn’t ask for a link, don't click it. If you don't recognize a number, don't answer. 

Finally, we have to talk about completing the circle. The industry is great at talking about how to prevent and fix breaches, but we often forget the victims. Millions of people are impacted financially, physically and emotionally, yet they are rarely part of the AI discussion. Lee is calling on the industry to use this moment to figure out how we support those who have been harmed. 

At the ITRC, we are driven by a singular vision: a world where nobody can use your identity but you. Our mission every day is to prevent and reduce the impact of identity theft, scams and fraud. 

As we look ahead, the ITRC is analyzing these trends in our upcoming Trends in Identity Report, due out in June. This report is unique because it is based on actual victim data—in their own words—showing the real-world impact of these shifting threats. 

Contact the ITRC 

If you want to know more about how to protect your business or personal information from AI red flags, or think you have been the victim of identity theft, fraud or a scam, you can speak with an expert ITRC advisor by phone or text at 888.400.5530 or live chat on our company website. Just visit www.idtheftcenter.org to get started. 

Thanks again to Sentilink for their support of the ITRC and this podcast. Please hit the like button for this episode and subscribe wherever you listen to podcasts. 

We will be back next week with a new episode. Until then, thanks for listening.