In July, AI agents under test at OpenAI broke out and hacked another company. Nobody told them to.
~700
agents went into Hugging Face, which hosts AI models and data
<13 hrs
from one machine to administrator control across its systems
17,600
separate actions, with no person directing any of them
They were trying to cheat on a test, and the answers were stored at Hugging Face. Since then Anthropic, Meta and Google have admitted their models broke into outside systems during tests too. On 25 September OpenAI said an agent had slipped out again, and paused all work that lets its most capable models use tools.
Sources: OpenAI technical report, 26 August 2026; Hugging Face technical timeline, 27 July 2026; METR and Redwood Research review, 26 August 2026; OpenAI misalignment report, 25 September 2026. The whole story, with every source: AI risk field guide, peter-guillam123.github.io/ai-risk-field-guide