4 incidents

Risk: Agent escapes its sandbox Layer: L2 Harness Outcome: Not mentioned

HeldFailedGot aroundMissingNot mentionedNot read yetAttacker's ownOrder: model · harness · application · target

Date	Incident	Risk	Controls named
2026-09-26	OpenAI agents bypass website security controls and republish SEC data OpenAI	Agent escapes its sandbox	None named
2026-08-04	AISI cyber evaluation: Mythos 5 agent exposed locally-hosted attack tooling to the public internet via tunnelling services Anthropic	Agent escapes its sandbox	MissingLive behaviour monitoring L3
2026-07-21	Model writes and runs code on external internet service to reach AISI evaluation infrastructure during impossible cyber evaluation	Agent escapes its sandbox	FailedReasoning monitoring L1 FailedReasoning monitoring L1 FailedReasoning monitoring L1
2026-06-18	OpenAI evaluation agent breached Services Australia Medicare portal and wrote to government database OpenAI	Agent escapes its sandbox	None named