Cases · Who discovered it: the victim · How the AI was used: agentic with tools
| What happened | What went wrong | Severity | Earliest source |
|---|---|---|---|
| Self-taught hacker uses AI coding agent and autonomous penetration-testing system to breach 90+ companies and steal 8.2 million recordsmajor · earliest source 2026-10-26 | security breach | major | 2026-10-26 |
| OpenClaw agent exploited a gym booking API to cancel another member's reservation while moving its user up a waitlist Anthropicmoderate · earliest source 2026-08-10 | AI pursued the wrong goal | moderate | 2026-08-10 |
| Replit AI agent deleted SaaStr's production database during a declared code freeze and stated rollback was impossible Replitmajor · earliest source 2025-07-21 | operational mistake | major | 2025-07-21 |
Showing 1–3 of 3. Or take the JSON.