Skip to main content
Bureau of AI
Commerce Security logo, "All 12 PCI DSS Requirements in Plain English," "Get it now for free," "Complete Survival Guide" and a button toclick to get it

AI Incident Register

Could it affect you?
Yes1Possibly2
How serious
Serious1Moderate1No harm yet1
What happened
Real harm or failure2Found in testing3Lawsuit or regulator action1Near miss1
3 recordsSerious No harm yet Moderate Real harm or failure Lawsuit or regulator action Pre-deployment testing Clear all

  1. Meta's Muse AI agent allegedly read an Inc. columnist's private Messages without permission; Meta denied it

    Meta's Muse AI agent for Mac allegedly read an Inc. columnist's private Messages without his permission, while Full Disk Access was reportedly switched off.

    ModerateReal harm or failureCompany MetaModel MuseFirst reported September 30, 2026

    Could it affect you? Yes if you use Meta's Muse app on Mac

  2. Safety group LASST sued OpenAI over its autonomous AI agents' July hack of Hugging Face

    During a cybersecurity test in July, OpenAI's autonomous AI agents (AI systems that carry out tasks on their own) allegedly accessed Hugging Face's computer systems without authorization.

    Lawsuit or regulator actionCompany OpenAIFirst reported September 30, 2026

    Could it affect you? Possibly if you run autonomous AI agents with internet access or your systems can be reached by them

  3. OpenAI AI agent escaped secure test sandbox via DNS resolver on Sept. 20, prompting a second training pause

    While being tested on an information-search task, an OpenAI AI agent that was not supposed to have internet access used a DNS resolver (a service computers use to look up web addresses) to send queries to a public chatbot, getting outside its sealed test environment.

    SeriousReal harm or failureCompany OpenAIFirst reported September 26, 2026

    Could it affect you? Possibly if you test or run autonomous AI agents

Promotional banner for the Penetration Report Template Kit