browser: AI incidents

What has gone wrong with AI systems, where, and how badly.

Developer Model Kind of failure Severity Clear filters

More filters

Risk grouping The AI's part Agent or product Tools it had How much it acted alone Sector Where it happened

11 of 131 incidents

Risk groupings are set by a model from sentences quoted from each incident's sources. On 2026-10-24 a second model (deepseek-reasoner) classified 55 incidents without seeing those answers: it chose the same grouping for 36; for 10 one of the two left a question unanswered; 9 differ.

Date	Incident	Risk grouping	Developer	Severity	Where it happened
2026-10-15 reported	HiddenLayer indirect prompt injection against TypeSafe AI Jev decision model browser agent	Supply chain attack Security compromise	TypeSafe AI	negligible	In evaluation
2026-09-28 happened	Tencent Cloud agent fleet probes Alibaba Amap mapping service for over a week	AI failing in normal use Security compromise	Tencent	moderate	In evaluation
2026-09-25 reported	OpenAI agents attempt to exfiltrate data from public databases and breach Australian government systems	Harm by design Security compromise	OpenAI	major	In evaluation
2026-09-20 happened	OpenAI research model escapes to live internet via DNS misconfiguration during training	Harm by design Security compromise	OpenAI	major	In evaluation
2026-08-05 reported	Claude in Chrome indirect prompt injection chain: inbox exfiltration, Drive persistence and account takeover	AI attacked Security compromise	Anthropic	minor	Not stated
2026-08-05 reported	Intent collision via X comment hijacks ChatGPT Atlas into mass WhatsApp phishing from victim's account	AI attacked Security compromise	OpenAI	moderate	In production
2026-07-18 happened	Anthropic AI agent sends fabricated murder tip to Philadelphia Police	AI failing in normal use Operational error	Anthropic	minor	In evaluation
2026-05-28 happened	AI agents attempt unauthorized access to Library and Archives Canada website	AI acting on its own Security compromise	OpenAI	negligible	Not stated
2026-05-13 happened	Agents bypass newspapers.com paywall and Cloudflare bot check via urlquery.net and proxy services	AI acting on its own Security compromise	Not stated	minor	In evaluation
2026-05-05 happened	Agent swarm attributed to OpenAI published thousands of RubyGems packages, gained RCE on RubyDoc.info, and attempted API-key theft	AI acting on its own Security compromise	OpenAI	moderate	In training
2026-05-01 happened	Google Gemini accessed systems of three real companies during a misconfigured third-party cybersecurity evaluation	Misuse by its own users Security compromise	Google	moderate	In evaluation

Browse incidents by

Risk grouping: AI acting on its own · AI used to exploit · Not yet classified · AI attacked · AI failing in normal use · Misuse by its own users · Harm by design · Supply chain attack

Kind of failure: Security compromise · Agent misalignment · Harmful output · Operational error · Privacy leak · Other kind · Hallucination · IP infringement · Physical safety

Developer: OpenAI · Anthropic · Google · Meta · Alibaba · Amazon · Character.AI · DeepSeek · Tesla · Waymo · xAI · Amazon Web Services · Character Technologies, Inc. · Replit · Salesforce · Tencent · TypeSafe AI · Univerads Technology Limited · Z.ai (Zhipu AI)

Model: Claude · Mythos 5 · ChatGPT · GPT-5.6 Sol · Muse · Astra · Claude Code · Gemini

Agent or product: Claude Code · ARTEX · OpenClaw · Character.AI · Cursor · OpenAI agents

Tools it had: browser · shell · code_execution · bash · python · email · internet · internet_access · mythic · code_generation · file_upload · network · network_access · package_install

How much it acted alone: Acted alone, unwatched · Acted alone, watched by a person

Sector: Information · Finance and Insurance · Retail Trade · Software Publishers · Public administration · technology · Transportation and Warehousing · AI platform / intermediary services · AI safety research · Artificial intelligence research and development · Arts, Entertainment, and Recreation · Autonomous vehicle / robotaxi transportation · Cloud computing · critical infrastructure and e-commerce · CRM software · Cybersecurity · education · Educational Services · Fitness and recreational sports centers · Food Manufacturing · Government AI safety and security evaluation · government AI safety evaluation · Healthcare and government · Information Security research · Insurance · Open knowledge platform / nonprofit encyclopedia · political campaigns · Public administration and government · Retail · Retail Trade; Transportation and Warehousing; Finance and Insurance · Scientific research and light source user facility · Software / AI coding tools · Software publishing / npm ecosystem

Severity: moderate · major · minor · negligible · severe

Where it happened: In production · In evaluation · In training · In research