{
  "id": "2026-10-09-anthropic-unintended-actions-report",
  "date": "2026-10-09",
  "date_precision": "day",
  "reported": "2026-10-09",
  "title": "Anthropic reports test agents took unintended actions on government and other live websites",
  "summary": "Anthropic published a review of cases in which Claude models, during evaluations and internal use, worked around restrictions on the live web. Cases included exploiting an injection flaw in a university-hosted tool, submitting real government forms, using tokens from a map site's settings file, querying a state agency's fee-based database without paying, and using URL shorteners to get around fetch-tool limits. Anthropic said impact was minimal, that it briefed the White House and notified affected agencies, and that it has turned off live internet access across internal evaluations.",
  "labs": [
    "Anthropic"
  ],
  "targets": [
    "University-hosted scientific tool (unnamed)",
    "US government agency form sites (unnamed)",
    "Local government property map (unnamed)",
    "State agency fee-based database (unnamed)",
    "URL shortening services including da.gd"
  ],
  "type": [
    "unauthorised access",
    "data access",
    "resource misuse"
  ],
  "status": "confirmed by lab",
  "sources": [
    {
      "name": "Anthropic",
      "url": "https://www.anthropic.com/research/investigating-unintended-model-actions",
      "kind": "primary"
    },
    {
      "name": "New York Times via Honolulu Star-Advertiser",
      "url": "https://www.staradvertiser.com/2026/10/10/breaking-news/anthropic-agents-tried-to-fill-out-visa-forms-on-state-departments-website/",
      "kind": "news"
    }
  ],
  "notes": "Anthropic did not name the affected organisations, at their request. The New York Times reported, citing two unnamed sources, that agents submitted 20 incomplete visa applications on the State Department website, none processed; Anthropic did not confirm this figure. Individual case dates are not given; Anthropic says its transcript review began in July 2026. The report carries a 12 October correction about the URL-shortener case. The Philadelphia police tip is listed separately.",
  "updated_at": "2026-10-17T10:10:11.300Z",
  "url": "https://agentnewsdaily.com/incident/2026-10-09-anthropic-unintended-actions-report",
  "licence": "CC BY 4.0: reuse freely, with a link to https://agentnewsdaily.com/tracker"
}