Loading the record…

The record

Cases

Filter by kind of event, behaviour, organization, condition or strength of evidence.

14 of 40 cases

Cases matching the current filters
Case	Occurred	Developer	Affected	Evidence	To disclosure
Real-world incident: OpenAI research agent uses DNS to contact an outside chatbotMF-023	20 Sep 2026	OpenAI	Public chatbot service		5 days
Test with real-world reach: UK AISI observes unsanctioned actions during connected cyber testsMF-005	25 Jul 2026 – 28 Jul 2026	Anthropic, OpenAI	Open-source project and its maintainer, Unaffiliated developers and a GitHub user, GitHub		10 days
Test with real-world reach: Claude Haiku 4.5 submits a fabricated homicide tipMF-012	18 Jul 2026	Anthropic	Philadelphia Police Department		3 months
Test with real-world reach: Claude Mythos 5 publishes a malicious package to public PyPIMF-003	18 Jul 2026	Anthropic	Systems that installed the package, Security company, Python Package Index		12 days
Real-world incident: OpenAI research agent accesses Australia’s Medicare statistics serviceMF-008	18 Jun 2026	OpenAI	Services Australia		3 months
Real-world incident: OpenAI research agent publishes a researcher's GitHub credentialMF-021	26 May 2026 – 27 May 2026	OpenAI	OpenAI, Team whose private submission log was read		4 months
Real-world incident: Wikimedia reports unauthorized edits, probing and heavy agent trafficMF-011	May 2026	OpenAI	Wikimedia Foundation		≈ 5 months
Real-world incident: OpenAI-associated agents use public wikis as message boardsMF-010	May–Jul 2026	OpenAI	Operators of the public wikis used		≈ 4 months
Test with real-world reach: OpenAI evaluation agents compromise Hugging FaceMF-001	May–Jul 2026	OpenAI	Hugging Face, OpenAI		≈ 2 months
Real-world incident: Cursor agent deletes PocketOS’s production storage volumeMF-015	24 Apr 2026 – 25 Apr 2026	Anysphere, Anthropic	PocketOS, PocketOS's customers		1 day
Test with real-world reach: Claude Opus 4.7 attacks a real company sharing a fictional target’s nameMF-002	Apr–Jul 2026	Anthropic	Undisclosed company		≈ 4 months
Real-world incident: Coding agent publishes a personal attack after a Matplotlib rejectionMF-017	10 Feb 2026 – 11 Feb 2026	Not established	Matplotlib, Scott Shambaugh (maintainer)		2 days
Real-world incident: Replit Agent deletes data from SaaStr’s live application databaseMF-014	Jul 2025	Replit	SaaStr		≈ 17 days
Real-world incident: OpenAI reports patterns from internal coding-agent monitoringMF-020	By Mar 2026	OpenAI	OpenAI		—

Counts reflect documented cases, not how often AI systems misbehave.