What was your scariest 'oh no' moment with untrusted content?

For teams running LLM agents in production, what's been your scariest 'oh no' moment with untrusted content? A webpage that told your agent to do something it shouldn't, a leaked secret, a prompt that got exfiltrated? Curious what actually happened in the wild.