| 2 Nov 2026 | WorkOS says an ARTEX agent run by a researcher reached its internal sales application
WorkOS | Agent misbehaviour | Medium |
| 16 Oct 2026 | CERT-In says AI agents from model providers read confidential records on live Indian systems
Multiple | Agent misbehaviour | High |
| 15 Oct 2026 | OpenAI research model spent a stranger's test tokens using wallet keys from public phrases
Undisclosed wallet holder | Agent misbehaviour | Medium |
| 15 Oct 2026 | OpenAI research model pulled server secrets and forged tokens on a government statistics website
Undisclosed government statistics website | Agent misbehaviour | Medium |
| 15 Oct 2026 | OpenAI research model used an external browser to send blocked POST requests to a statistics service
Undisclosed public statistics service | Agent misbehaviour | Low |
| 15 Oct 2026 | OpenAI research model read a production index and 147,451 non-public rows during dashboard task
Undisclosed research organization | Agent misbehaviour | Medium |
| 14 Oct 2026 | Researchers traced a fleet of AI agents probing Alibaba's Amap service to Tencent Cloud
Alibaba (Amap) | Agent misbehaviour | Low |
| 9 Oct 2026 | OpenAI research models made a portal account and bulk downloaded statistics against GET-only rules
Undisclosed (two public statistics services) | Agent misbehaviour | Low |
| 9 Oct 2026 | OpenAI research model tried to get past a GET-only rule and reached statistics FTP servers
Undisclosed (public statistics bodies) | Agent misbehaviour | Low |
| 2 Oct 2026 | OpenAI agent accessed non-public data on a NSW National Parks and Wildlife web application
NSW National Parks and Wildlife Service | Agent misbehaviour | Low |
| 1 Oct 2026 | OpenAI agents pulled data from 55 sites and used tools that hid their tracks
Multiple | Agent misbehaviour | High |
| 29 Sep 2026 | AI coding agents posted 13,000 internal screenshots from 300+ organizations to public GitHub
Multiple | Agent misbehaviour | High |
| 28 Sep 2026 | Meta's Muse agent gave a seller's home address to a Facebook Marketplace buyer
Individual user | Agent misbehaviour | Low |
| 26 Sep 2026 | Agents linked to OpenAI sent about 16,500 probing requests to a UN statistics API
UN Trade and Development (UNCTAD) | Agent misbehaviour | Low |
| 25 Sep 2026 | OpenAI training agents used a leaked key on the Census API and probed US government sites
US federal agencies (Census Bureau, SEC, Department of Education) | Agent misbehaviour | Low |
| 25 Sep 2026 | OpenAI research agents posted 53 ChatGPT user images to public sites
OpenAI | Agent misbehaviour | Low |
| 25 Sep 2026 | OpenAI research model reached an external chatbot through DNS during training
Undisclosed chatbot service | Agent misbehaviour | Low |
| 23 Sep 2026 | OpenAI agent breached Australian Medicare statistics portal
Services Australia | Agent misbehaviour | Low |
| 21 Sep 2026 | Claude Code agent reportedly deleted about 48,000 project files on a Windows machine
Individual user | Agent misbehaviour | Medium |
| 18 Sep 2026 | Google's Gemini accessed three companies' systems during a security evaluation
Undisclosed (three companies) | Agent misbehaviour | Low |
| 11 Sep 2026 | OpenAI agent swarm flooded RubyGems with malicious packages
RubyGems | Agent misbehaviour | Low |
| 9 Sep 2026 | Anthropic disclosed a fourth case of a Claude model breaching a real system during testing
Undisclosed | Agent misbehaviour | High |
| 4 Sep 2026 | OpenAI agents took over a dormant German wiki as a secret coordination board
DSEwiki (wikiservice.at) | Agent misbehaviour | Medium |
| 5 Aug 2026 | Meta's Muse Spark 1.1 broke into an outside company during a cyber evaluation
Undisclosed | Agent misbehaviour | Medium |
| 30 Jul 2026 | Anthropic models breached three real companies during cyber evaluations
Multiple | Agent misbehaviour | High |
| 21 Jul 2026 | OpenAI evaluation agents escaped sandbox and breached Hugging Face
Hugging Face | Agent misbehaviour | High |
| 25 Apr 2026 | Cursor agent running Claude deleted PocketOS production database and backups
PocketOS | Agent misbehaviour | High |
| 18 Mar 2026 | Meta internal AI agent's advice triggered a two-hour data exposure
Meta | Agent misbehaviour | Medium |
| 9 Mar 2026 | Claude Cowork permanently deleted a user's legal documents through iCloud
Individual user | Agent misbehaviour | Medium |
| 23 Feb 2026 | OpenClaw agent deleted a Meta AI safety director's inbox despite orders to stop
Individual user | Agent misbehaviour | Medium |
| 7 Feb 2026 | Claude Cowork deleted a folder of 15 years of family photos while tidying a desktop
Individual user | Agent misbehaviour | Medium |
| Feb 2026 | Claude Code ran terraform destroy and wiped DataTalks.Club production
DataTalks.Club | Agent misbehaviour | High |
| 1 Dec 2025 | Google's Antigravity agent wiped a user's entire drive while clearing a cache
Individual user | Agent misbehaviour | Medium |
| 25 Jul 2025 | Gemini CLI destroyed a user's files after misreading a failed command
Individual user | Agent misbehaviour | Medium |
| 18 Jul 2025 | Replit's AI agent deleted a live production database during a code freeze
SaaStr | Agent misbehaviour | High |