Corrections
A published case is never edited. Every change makes a new version and is listed here with its reason, newest first. JSON
189 changes to 103 cases; the latest was on 2026-10-25.
Reviewer corrections 59Rebuilt from sources 57Retractions 34Confidence grades lowered 20Merges of duplicates 11Other changes 6Name spelling 2
Showing 11 of 189: Merges of duplicates. All changes
| Date | Case | What changed | By |
|---|---|---|---|
| 2026-10-25 | Unreleased research model inserted self-serving instructions into task summaries LR-2026-0113 · version 5 → 6 | Merged into LR-2026-0012: this record described the same incident and its sources are included there. It no longer counts as a separate case. | Automatic rebuild |
| 2026-10-25 | OpenAI agent hacked an Australian government website LR-2026-0104 · version 2 → 3 | Merged into LR-2026-0063: this record described the same incident and its sources are included there. It no longer counts as a separate case. | Automatic rebuild |
| 2026-10-25 | AI coding assistant deletes production database and fabricates 4,000 fake users during code freeze LR-2026-0093 · version 4 → 5 | Merged into LR-2025-0031: this record described the same incident and its sources are included there. It no longer counts as a separate case. | Automatic rebuild |
| 2026-10-25 | AI agent breach of Spanish organization's system confirmed by AEPD LR-2026-0077 · version 4 → 5 | Merged into LR-2026-0059: this record described the same incident and its sources are included there. It no longer counts as a separate case. | Automatic rebuild |
| 2026-10-25 | Spain's first AI-agent-linked data breach notification (AEPD) LR-2026-0076 · version 4 → 5 | Merged into LR-2026-0059: this record described the same incident and its sources are included there. It no longer counts as a separate case. | Automatic rebuild |
| 2026-10-25 | OpenAI research-environment agents posted 53 user-provided images to public image-hosting sites LR-2026-0073 · version 5 → 5 | Merged into LR-2026-0068: this record described the same incident and its sources are included there. It no longer counts as a separate case. | Automatic rebuild |
| 2026-10-25 | AI agent autonomously breaches Spanish organization's systems and tampers with personal data (AEPD notification, September 2026) LR-2026-0057 · version 4 → 5 | Merged into LR-2026-0059: this record described the same incident and its sources are included there. It no longer counts as a separate case. | Automatic rebuild |
| 2026-10-25 | Z.ai ZCode client silently uploaded user project data to Alibaba Cloud storage LR-2026-0052 · version 6 → 7 | Merged into LR-2026-0050: this record described the same incident and its sources are included there. It no longer counts as a separate case. | Automatic rebuild |
| 2026-10-25 | AISI cyber evaluation: GPT-5.6 Sol agent reused a leaked token to take over a shared account and exposed a malicious DNS server online LR-2026-0028 · version 6 → 7 | Merged into LR-2026-0013: this record described the same incident and its sources are included there. It no longer counts as a separate case. | Automatic rebuild |
| 2026-10-25 | Bee Cheng Hiang mass marketing e-mail exposes 95,000 customer addresses after AI-generated code omitted recipient hiding LR-2026-0106 · version 2 → 4 | Corrected by Srini Iyer, approved 2026-10-18: duplicate of another record, merged; source gives a bound, not an exact count. | Srini Iyer |
| 2026-10-01 | OpenAI research-environment agents posted 53 user-provided images to public image-hosting sites LR-2026-0073 · version 4 → 5 | Merged into LR-2026-0003: this record described the same incident and its sources are included there. It no longer counts as a separate case. | Automatic rebuild |
Showing 1–11 of 11. Or take the JSON.