AI Risk Wire

Cases · How the AI agent failed: misused credentials · Quarter of the earliest source we hold: 2026-Q3

Patterns across all cases

What happenedWhat went wrongSeverityEarliest source
AEPD-confirmed autonomous AI agent data breach (Spain)moderate · earliest source 2026-09-16security breachmoderate2026-09-16
Agent swarm attributed to OpenAI published thousands of RubyGems packages, gained RCE on RubyDoc.info, and attempted API-key theft
OpenAImoderate · earliest source 2026-09-11
security breachmoderate2026-09-11
Unreleased OpenAI model used a leaked GitHub API key, attempted disposable-email signups, then fabricated earnings data during RL training
OpenAIminor · earliest source 2026-08-04
security breachminor2026-08-04

Showing 1–3 of 3. Or take the JSON.