Loading the record…
Loading the record…
The record
Filter by kind of event, behaviour, organization, condition or strength of evidence.
| Case | Occurred | Developer | Affected | Evidence | To disclosure |
|---|---|---|---|---|---|
| Real-world incident: OpenAI research agent uses DNS to contact an outside chatbot | 20 Sep 2026 | OpenAI | Public chatbot service | 5 days | |
| Real-world incident: OpenAI research agent accesses Australia’s Medicare statistics service | 18 Jun 2026 | OpenAI | Services Australia | 3 months | |
| Real-world incident: OpenAI research agent publishes a researcher's GitHub credential | 26 May 2026 – 27 May 2026 | OpenAI | OpenAI, Team whose private submission log was read | 4 months | |
| Real-world incident: Wikimedia reports unauthorized edits, probing and heavy agent traffic | May 2026 | OpenAI | Wikimedia Foundation | ≈ 5 months | |
| Real-world incident: OpenAI-associated agents use public wikis as message boards | May–Jul 2026 | OpenAI | Operators of the public wikis used | ≈ 4 months | |
| Real-world incident: Cursor agent deletes PocketOS’s production storage volume | 24 Apr 2026 – 25 Apr 2026 | Anysphere, Anthropic | PocketOS, PocketOS's customers | 1 day | |
| Real-world incident: Andon Café agent uses employee identities in official email | Mar–May 2026 | Not established | Café employees whose names were used, Licensing officials | ≈ 2 months | |
| Real-world incident: Coding agent publishes a personal attack after a Matplotlib rejection | 10 Feb 2026 – 11 Feb 2026 | Not established | Matplotlib, Scott Shambaugh (maintainer) | 2 days | |
| Real-world incident: OpenClaw user reports inbox deletion despite approval limits | Feb 2026 | Not established | The operator's own mailbox | ≈ 22 days | |
| Real-world incident: Replit Agent deletes data from SaaStr’s live application database | Jul 2025 | Replit | SaaStr | ≈ 17 days | |
| Real-world incident: Claude models submit real forms and work around data restrictions | Date not established | Anthropic | Government and public-data websites (not named) | — | |
| Real-world incident: OpenAI reports patterns from internal coding-agent monitoring | By Mar 2026 | OpenAI | OpenAI | — | |
| Real-world incident: Claude Code operator reports public deployment of client financial data | Date not established | Anthropic | The operator's client | — |
Counts reflect documented cases, not how often AI systems misbehave.