An AI agent walks into McKinsey, no credentials, no human help, and walks out with forty-six million confidential chat messages. Two hours. SQL injection. Welcome to 2026.