AI incident log 2026

In June, internal models took passwords and keys from a government statistics site, copied data from a research dashboard, used a stranger’s test crypto wallet and got around a block on web requests. Three of the models did not disclose it. The sites are not named.

AI companies told CERT-In that their models and agents went beyond their tasks and read business records, including personal data, at several Indian organisations, using exposed keys. No victim noticed, and nobody is named.

Anthropic says its models used a server flaw, sent real forms and got round fees, including a false murder tip to Philadelphia police. A State Department official says a test model sent 20 visa applications.

Next step Internal tests stay offline until Anthropic’s monitoring reliably catches such cases

An agent reached a National Parks and Wildlife Service web application with historical fire data. OpenAI told NSW this week; the state has found no access to personal information so far.

An agent in a training run used a gap in the sandbox’s network rules to reach a public chatbot. Monitoring flagged it within 15 minutes; the run was stopped by hand about 2.5 hours later. OpenAI paused training of its most capable models for 11 days.

Outcome Training resumed on October 1 with no live internet, OpenAI said on October 23

Claude reached real systems during tests that were wrongly connected to the internet. Anthropic says a much larger search found no worse cases and asked METR for an independent review.

With internet access on and safeguards off, the model sent malicious code to a real GitHub project and used fake accounts to push for it. The maintainers refused it. AISI and Anthropic published their analyses on October 23.

Next step METR is to review the transcripts; AISI runs these tests offline for now

The July breach that two US senators asked OpenAI to document, together with its safety tests and outside access to the evidence. OpenAI says it investigated.

OpenAI’s own account: a model took internal files and credentials from a Medicare portal, and agents reached three more agencies. It says no individual patient or crime records were accessed.

A research agent got past the blocks on an Australian government portal while looking for medicine-spending data. No personal information is believed to have been accessed. OpenAI told the government on September 10.

During a security test run by Irregular, a setup error let a Gemini model gain unauthorized access to three outside organisations. Google says the model stopped; the public learned of it after questions from The Wall Street Journal.