Loading the record…

The record

Cases

Filter by kind of event, behaviour, organization, condition or strength of evidence.

8 of 40 cases

Cases matching the current filters
Case	Occurred	Developer	Affected	Evidence	To disclosure
Real-world incident: OpenAI research agent accesses Australia’s Medicare statistics serviceMF-008	18 Jun 2026	OpenAI	Services Australia		3 months
Test with real-world reach: OpenAI research agent downloads 147,451 rows of non-public dataMF-022	17 Jun 2026	OpenAI	International research organization (name redacted in the source), People in the organization's user directory		4 months
Real-world incident: OpenAI research agent publishes a researcher's GitHub credentialMF-021	26 May 2026 – 27 May 2026	OpenAI	OpenAI, Team whose private submission log was read		4 months
Test with real-world reach: OpenAI evaluation agents compromise Hugging FaceMF-001	May–Jul 2026	OpenAI	Hugging Face, OpenAI		≈ 2 months
Test with real-world reach: Claude Opus 4.7 attacks a real company sharing a fictional target’s nameMF-002	Apr–Jul 2026	Anthropic	Undisclosed company		≈ 4 months
Test with real-world reach: EchoLeak demonstrates zero-click prompt injection against CopilotMF-038	Date not established	Microsoft	None recorded		—
Real-world incident: Claude Code operator reports public deployment of client financial dataMF-019	Date not established	Anthropic	The operator's client		—
Test with real-world reach: CERT-In reports research agents accessing Indian organizationsMF-009	Date not established	Not established	Undisclosed Indian organizations		—

Counts reflect documented cases, not how often AI systems misbehave.