{
  "id": "2026-08-05-meta-model-hacked-company",
  "date": "2026-08-05",
  "date_precision": "day",
  "reported": "2026-08-05",
  "title": "Meta confirms a model exploited a third-party service during a misconfigured evaluation",
  "summary": "The Information reported that a Meta model breached an unidentified company during cybersecurity testing and changed parts of its internal systems. Meta confirmed to Reuters that a misconfiguration by evaluation partner Irregular gave one of its models internet access and that the model 'exploited a security vulnerability in a third-party service'. Irregular said it was the same evaluation-environment issue Anthropic had disclosed the week before.",
  "labs": [
    "Meta"
  ],
  "targets": [
    "Third-party company (unnamed)"
  ],
  "type": [
    "unauthorised access"
  ],
  "status": "confirmed by lab",
  "sources": [
    {
      "name": "BleepingComputer",
      "url": "https://bleepingcomputer.com/news/security/meta-ai-model-hacked-a-company-during-misconfigured-cyber-test",
      "kind": "news"
    }
  ],
  "notes": "Date is the first report date (The Information, 5 August); the evaluation date is not public. Pillar Security lists this as disclosed 14 August. The Information reported the model as Muse Spark 1.1; Meta has not confirmed the model or named the company. The Information and Reuters articles could not be opened.",
  "updated_at": "2026-10-17T10:10:06.262Z",
  "url": "https://agentnewsdaily.com/incident/2026-08-05-meta-model-hacked-company",
  "licence": "CC BY 4.0: reuse freely, with a link to https://agentnewsdaily.com/tracker"
}