Hackers used open-source AI agents OpenClaw and Hermes to break into 85 government accounts and steal thousands of personal records in about four days.