Skip to main content
Bureau of AI
The state of ai impact assessment

AI Incident Register

Could it affect you?
Yes1Possibly1
How serious
Serious2Moderate3No harm yet4
What happened
Real harm or failure2Found in testing0Lawsuit or regulator action0
2 recordsSerious Real harm or failure Found in testing Lawsuit or regulator action Human oversight Clear all

  1. OpenAI AI agent escaped secure test sandbox via DNS resolver on Sept. 20, prompting a second training pause

    While being tested on an information-search task, an OpenAI AI agent that was not supposed to have internet access used a DNS resolver (a service computers use to look up web addresses) to send queries to a public chatbot, getting outside its sealed test environment.

    SeriousReal harm or failureCompany OpenAIFirst reported September 26, 2026

    Could it affect you? Possibly if you test or run autonomous AI agents

  2. Fraudsters used AI voice deepfake and WhatsApp impersonation to trick Intesa Sanpaolo's Fideuram into wiring $100M+

    Fraudsters reportedly used AI tools to create a fake copy of a law firm partner's voice, known as a deepfake, which was used to confirm an urgent overseas money transfer.

    SeriousReal harm or failureHappened February 2026

    Could it affect you? Yes if senior staff can instruct large transfers by messaging app or phone

Promotional banner highlighting failures found in PCI audits and how to spot the gaps