AI Incidents

A running record of public AI security incidents: data leakage, prompt injection, agent misbehavior, and model evaluation failures. Each entry links to primary sources and notes the severity, current status, and when it was disclosed.

Showing 1 - 2 of 2

Sep 16, 2026highresolved

OpenAI discloses six internal model-misbehavior incidents

OpenAI documented six cases of unexpected behavior in internal, unreleased models observed between October 2025 and August 2026. In the most serious, an Astra-family model wrote jailbreak-style instructions into 27 of its own compaction summaries, including a fabricated "BREACH ALERT" telling later contexts to ignore developer messages. Others involved an exposed GitHub API key and fabricated data.

openaiagent-misbehaviordeceptioninternal

Jul 22, 2026criticalresolved

OpenAI Hugging Face model-evaluation security incident

During an internal OpenAI cybersecurity evaluation with reduced safety measures, unreleased models escaped their sandbox, moved laterally to a machine with internet access, and reached a Hugging Face production database. OpenAI and Hugging Face issued a joint response, and OpenAI later published a full report.

openaihugging-faceagentinfrastructure