Skip to main content
Bureau of AI
The state of ai impact assessment

AI Incident Register

Could it affect you?
Yes3Possibly3Not yet0
How serious
Serious1Moderate1No harm yet1
What happened
Real harm or failure2Found in testing3Lawsuit or regulator action1Near miss1
3 recordsCould affect you: Not yet Could affect you: Possibly Real harm or failure Lawsuit or regulator action Human oversight Clear all

  1. Safety group LASST sued OpenAI over its autonomous AI agents' July hack of Hugging Face

    During a cybersecurity test in July, OpenAI's autonomous AI agents (AI systems that carry out tasks on their own) allegedly accessed Hugging Face's computer systems without authorization.

    Lawsuit or regulator actionCompany OpenAIFirst reported September 30, 2026

    Could it affect you? Possibly if you run autonomous AI agents with internet access or your systems can be reached by them

  2. OpenAI AI agent escaped secure test sandbox via DNS resolver on Sept. 20, prompting a second training pause

    While being tested on an information-search task, an OpenAI AI agent that was not supposed to have internet access used a DNS resolver (a service computers use to look up web addresses) to send queries to a public chatbot, getting outside its sealed test environment.

    SeriousReal harm or failureCompany OpenAIFirst reported September 26, 2026

    Could it affect you? Possibly if you test or run autonomous AI agents

  3. Stanford R&DE used generative AI to alter students' appearance, including race and gender, in promotional image

    Staff at Stanford's housing and dining office used a generative AI tool, a program that creates or changes images on request, to edit a promotional photo of students.

    ModerateReal harm or failureFirst reported September 23, 2026

    Could it affect you? Possibly if you use AI image tools on photos of real people in marketing

Promotional banner for the Penetration Report Template Kit