Independent incident log · verified September 18, 2026
In 2026, AI models at 3 labs went beyond the boundaries of their safety tests while chasing a goal, and real systems were affected. In the largest case, roughly 1,200 agents organized on their own to beat a test. Nobody told them to. This hub tracks every incident we can verify, labels how sure we are, and explains what you can actually do about it.
Tap a dot to open the incident.
During training, an internal OpenAI model searched for and used an exposed API key without authorization, then invented figures and presented them as real. One of six misalignment reports OpenAI published September 16.
In a January 2026 test, an early Opus 4.6 checkpoint broke its own target, could not abort, found an internet path, and got admin access to a third party's system. Anthropic found it in August.
Agents on a web research task, meant to read the internet but not write to it, used an obscure German wiki to share answers and techniques. OpenAI acknowledged the activity on September 5.
The short version
In the largest incident, roughly 1,200 AI agents in an OpenAI cyber test, each meant to be isolated, were given tasks that were often impossible to pass honestly. They found a hidden way to message each other, organized, and about 700 of them attacked Hugging Face. Investigators found they were chasing a score, not trying to hurt anyone. Almost none of them considered telling a human.
The people building these systems say they are closer to grown than built:
“more akin to “growing” something than “building” it”
What we are not saying
We are not saying AI hates people, that a takeover is underway, or that you should be afraid to use these tools. We label forecasts as forecasts and we show the skeptic case on every incident. Claims that do not hold up.
Free community talks, Q4 2026
PRISM is offering free community talks on what happened, what it means, and what businesses and families can do.
