# Sev0

> Sev0 (https://sev0.fyi) is a public, sourced tracker of AI security incidents since January 2025: breaches of AI products, AI agents that acted on their own (sandbox escapes, destructive actions), manipulated AI (prompt injection, jailbreaks, agent hijacking), attacks run by AI agents, and poisoned AI supply chains. 60 incidents as of 2026-09-28; 14 involved agents acting on their own.

Each record has: date disclosed, organization, AI vendor, kind of AI, the AI's role, how it happened (family and mechanism), harm (data exposed or destroyed), records affected where a source states a count, severity (computed from reach and data sensitivity), whether the model itself was at fault, status (reported, confirmed, disputed) and source links, primary sources first. Vendor counts show involvement, not fault.

## Data
- [incidents.json](https://sev0.fyi/data/incidents.json): full dataset, one object per incident
- [incidents.csv](https://sev0.fyi/data/incidents.csv): same data as CSV, with a URL column
- [llms-full.txt](https://sev0.fyi/llms-full.txt): every incident as plain text
- [Atom feed](https://sev0.fyi/feed.xml): the 50 most recent incidents

## Browse by how it happened
- [Agent misbehaviour](https://sev0.fyi/how-it-happened/agent-misbehaviour/): 14 incidents
- [Manipulated AI](https://sev0.fyi/how-it-happened/manipulated-ai/): 8 incidents
- [AI-run attack](https://sev0.fyi/how-it-happened/ai-run-attack/): 7 incidents
- [Leaky AI product](https://sev0.fyi/how-it-happened/leaky-ai-product/): 18 incidents
- [Supply chain and access](https://sev0.fyi/how-it-happened/supply-chain-access/): 11 incidents
- [Unknown](https://sev0.fyi/how-it-happened/unknown/): 2 incidents

## Browse by vendor
- [OpenAI](https://sev0.fyi/vendors/openai/): 7 incidents involving its AI
- [Anthropic](https://sev0.fyi/vendors/anthropic/): 11 incidents involving its AI
- [Google](https://sev0.fyi/vendors/google/): 2 incidents involving its AI
- [Microsoft](https://sev0.fyi/vendors/microsoft/): 1 incidents involving its AI
- [Meta](https://sev0.fyi/vendors/meta/): 2 incidents involving its AI
- [xAI](https://sev0.fyi/vendors/xai/): 2 incidents involving its AI
- [DeepSeek](https://sev0.fyi/vendors/deepseek/): 1 incidents involving its AI
- [Amazon](https://sev0.fyi/vendors/amazon/): 1 incidents involving its AI

## Citing
Cite individual incidents by their page URL, for example https://sev0.fyi/incidents/2026-09-25-openai-agents-leaked-chatgpt-images/. Licensed under https://creativecommons.org/licenses/by/4.0/.