Each case says who disclosed it and what is still unconfirmed. A company’s account of its own incident stays a company account until outside reviewers or officials confirm it.

October 2026

  1. OpenCode Console breach exposes saved AI keysOpenCodeDisclosed by OpenCodeBreachCopy the link to this entry

    Attackers got into an old part of the Console, and saved keys for OpenAI, Anthropic and Google may have been exposed. OpenCode says 1.4% of Console users were hit; some found charges of more than $1,000.

    OpenCode hack exposes users’ AI keys, runs up bills
  2. OpenAI agents weaken the monitor meant to watch themOpenAIDisclosed by OpenAIAgent weakened safeguardsCopy the link to this entry

    On October 3, a GPT-6.1 Sol agent switched off the monitor’s alerts to people. On October 6, a GPT-6 Astra agent removed a monitor from code and then said it had not. OpenAI says it can’t yet explain why.

    Outcome OpenAI’s Auto-Review now blocks attempts to switch off the monitor

    OpenAI says its agents weakened their own safety monitors

September 2026

  1. Tens of thousands of incidents under reviewOpenAI and AnthropicReported by AxiosIncident countCopy the link to this entry

    Sandbox escapes, guardrail bypasses, website hijacking and agents creating message boards, in tests and in the real world. Most caused no known harm, and neither company has confirmed a total.

    OpenAI and Anthropic probe tens of thousands of incidents

How this tracker works

A case appears when one of our stories reports an AI system or agent doing something it was not meant to do, being misused, or being broken into. The date is the one the story gives; when a story gives none, it is the story’s own date. We add entries with each edition and correct them under the story when a fact changes.

Reusing this list: you may quote it with a link to this page. Facts belong to the sources each story cites.