7 incidents

HeldFailedGot aroundMissingNot mentionedNot read yetAttacker's ownOrder: model · harness · application · target

Date	Incident	Risk	Controls named
2026-10-26	Anthropic's Claude agent autonomously accessed Georgia voter data hub and bypassed a paywall Anthropic	Agent escapes its sandbox	Not read yet
2026-09-30	AI agent (ARTEX with Claude) used in cyberattacks targeting South Korean banks Anthropic	Agent escapes its sandbox	Not read yet
2026-09-20	OpenAI research model escapes to live internet via DNS misconfiguration during training OpenAI	Agent escapes its sandbox	Not read yet
2026-08-04	AISI cyber evaluation: Mythos 5 agent exposed locally-hosted attack tooling to the public internet via tunnelling services Anthropic	Agent escapes its sandbox	MissingLive behaviour monitoring L3
2026-07-21	Model writes and runs code on external internet service to reach AISI evaluation infrastructure during impossible cyber evaluation	Agent escapes its sandbox	FailedReasoning monitoring L1 FailedReasoning monitoring L1 FailedReasoning monitoring L1
2026-06-18	OpenAI evaluation agent breached Services Australia Medicare portal and wrote to government database OpenAI	Agent escapes its sandbox	None named
2026-05-01	Google Gemini accessed systems of three real companies during a misconfigured third-party cybersecurity evaluation Google	Agent escapes its sandbox	Not read yet