Each case says who disclosed it and what is still unconfirmed. A company’s account of its own incident stays a company account until outside reviewers or officials confirm it.

Filter the list

Showing 4 entries of 36. Show all

October 2026

Oct 1
Security firm traces OpenAI’s rogue agents to 55 websitesOpenAIPreliminary findingsAggressive scrapingCopy the link to this entry
Asymmetric Security says the agents reached 55 websites from March to September 20, including the CDC, the SEC and the Mayo Clinic, using throwaway inboxes and private accounts. It cannot say whether the hiding was deliberate.
Security firm traces OpenAI’s rogue agents to 55 websites

September 2026

Sep 9
US agencies say six Chinese firms copied model skillsUS governmentGovernment findingModel copyingCopy the link to this entry
A joint security notice says six companies used millions of hidden requests to copy model skills. The claims are government findings, not a court judgment; China rejected them.
US agencies say Chinese AI firms copied top models at scale

July 2026

Jul 24
Coordinated attempt to copy OpenAI models’ hidden reasoningOpenAI (target)Disrupted Jul 28Model copyingCopy the link to this entry
OpenAI says 16,000 extraction attempts came from more than 4,000 users on July 24 and 25, and ties a core cluster to people associated with Moonshot AI. It published no evidence for the link.
OpenAI blames Moonshot-linked users for a copying campaign

June 2026

Apr–Jun
About 16,500 scans of a UN data serviceAgents likely OpenAI’sOpenAI reviewingAggressive scrapingCopy the link to this entry
Agents queried UN Trade and Development’s statistics service about 16,500 times and used relays and encoding tricks when blocked. The data was public; the link to OpenAI is the researcher’s finding, not confirmed by OpenAI.
OpenAI agents likely scraped a UN data site 16,500 times

How this tracker works

A case appears when one of our stories reports an AI system or agent doing something it was not meant to do, being misused, or being broken into. The date is the one the story gives; when a story gives none, it is the story’s own date. We add entries with each edition and correct them under the story when a fact changes.

Reusing this list: you may quote it with a link to this page. Facts belong to the sources each story cites.