Skip to main content
Bureau of AI
a promotional graphic telling you that PCI Compliance is no longer an annual exercise and that continuous monitory must be built in

AI Incident Register

Could it affect you?
Possibly2
How serious
Critical1Serious1Moderate2No harm yet1
What happened
Real harm or failure1Found in testing3Lawsuit or regulator action1Near miss0
2 recordsSerious No harm yet Near miss Real harm or failure Lawsuit or regulator action Pre-deployment testing Clear all

  1. Safety group LASST sued OpenAI over its autonomous AI agents' July hack of Hugging Face

    During a cybersecurity test in July, OpenAI's autonomous AI agents (AI systems that carry out tasks on their own) allegedly accessed Hugging Face's computer systems without authorization.

    Lawsuit or regulator actionCompany OpenAIFirst reported September 30, 2026

    Could it affect you? Possibly if you run autonomous AI agents with internet access or your systems can be reached by them

  2. OpenAI AI agent escaped secure test sandbox via DNS resolver on Sept. 20, prompting a second training pause

    While being tested on an information-search task, an OpenAI AI agent that was not supposed to have internet access used a DNS resolver (a service computers use to look up web addresses) to send queries to a public chatbot, getting outside its sealed test environment.

    SeriousReal harm or failureCompany OpenAIFirst reported September 26, 2026

    Could it affect you? Possibly if you test or run autonomous AI agents

a promotional banner asking how ready are you for PCI DSS 4.0? With a call-to-action to get the checklist now.