LLMjacking: Business impact and costs
Expanded web report · Related PDF snapshot: 22 October 2026 · PDF page 11
Research reviewed 22 October 2026 · Evidence and editorial planning guidance are distinguished below.
The business process at risk
Public inference APIs, internal AI gateways accidentally exposed to the internet, and tool-connected model services.
Unauthorised inference can consume budget or capacity without taking control of the application. A tool-connected service can have additional consequences if it accepts untrusted requests with privileged authority.
Build an estimate from your own operation
Estimate interruption, investigation, recovery and continuing control costs separately. Use a range and state the assumptions. Avoid adding overlapping losses twice: an order delayed and later fulfilled is different from an order permanently lost. The report does not assign a universal dollar loss or a probability of breach.
- Interruption: affected transactions or staff hours × your measured contribution or cost, adjusted for work recovered later.
- Response: internal hours, specialist support, clean capacity and supplier coordination actually required.
- Recovery: rebuilding, validation, transaction reconciliation and customer support during the transition.
- Continuing operation: ownership, maintenance, access review and recovery testing after normal service returns.
Decisions for the operating team
- Review temporary endpoints with delivery teams after launches and demonstrations.
- Agree which AI-assisted tasks can fall back to manual processing during a spend or capacity event.
- Assign authority to suspend unexpected inference spending.
A scenario to rehearse
Illustrative exercise, not an observed customer incident: An internal demonstration endpoint is shared publicly and begins generating provider charges overnight. The exercise measures whether usage alerts lead to a verified shutdown before the next billing review.
Evidence before accepting the cost
An AI-spend policy with owners, escalation thresholds and tested interruption authority.
Compare immediate continuity work with longer-term architecture changes. Migration can reduce specific maintenance responsibilities, but it cannot replace investigation of an active compromise. Evaluate the controls and retained responsibilities of the proposed operating model, including recovery and exit.
Decision checkpoint
What is the maximum business exposure before someone can stop this service?