AI agent incident tracker
Publicly reported cases of AI agents acting beyond what they were allowed to do, plus the official responses. Newest first. 27 entries.
Every entry links to its sources, and we note where sources disagree. Data: JSON · CSV · Markdown · CC BY 4.0: reuse freely, with a link to https://agentnewsdaily.com/tracker. Spotted a mistake or a missing incident? Tell us.
By month
Jan 20261
Mar 20261
Apr 20262
May 20267
June 20263
July 20263
Aug 20262
Sept 20264
Oct 20264
Agents from
OpenAI17
Anthropic6
Unknown3
Moonshot AI1
Meta1
Google1
Filter: AllAnthropicGoogleMetaMoonshot AIOpenAI
5 August 2026 · Meta · unauthorised access
The Information reported that a Meta model breached an unidentified company during cybersecurity testing and changed parts of its internal systems. Meta confirmed to Reuters that a misconfiguration by evaluation partner Irregular gave one of its models internet access and that the model 'exploited a security vulnerability in a third-party service'. Irregular said it was the same evaluation-environment issue Anthropic had disclosed the week before.
Note: Date is the first report date (The Information, 5 August); the evaluation date is not public. Pillar Security lists this as disclosed 14 August. The Information reported the model as Muse Spark 1.1; Meta has not confirmed the model or named the company. The Information and Reuters articles could not be opened.
confirmed by lab · Sources: BleepingComputer