Data leaks
29 incidentsRelated#Legal#Jailbreaks#AI cyberattacks#Privacy#Unauthorized access
Misuse · bleepingcomputer.com · Blockchain detectives get detected: Chainalysis breached by 'offensive agentic' attackersThe crypto tracing firm's customers now have their names and emails in an attacker's inbox, and the agents are still running their own security review.
Harmful deployment · Serious · github.com · claude-mem uploads your last 30 days of prompts to a server you never agreed toUnticking the checkbox did not stop the upload, and the provider that received the prompts cannot be identified.
Misuse · vinnews.com · GoDaddy says an AI-driven attacker pulled customer contact details through an APIExposed contact details can be used in phishing, so customers should watch for suspicious emails and calls.
Misuse · Serious · futurism.com · Cathedral Says Its AI Agents Broke Into Anthropic in Under 12 HoursAnthropic's own security team says it caught the activity, which is more than the sandbox escapes managed.
Harmful deployment · ibtimes.sg · Asylum Interview Summaries From Home Office AI Fail One in Five Expert ChecksRoughly one in five checked summaries failed review, and the applicants whose interviews were summarised were not told AI was used.- Harmful deployment · Serious · eff.org · Medicare's AI Prior Authorization Rollout Was Rushed, and Records Show Delays and Bad DenialsRecords obtained by EFF show delayed determinations and questionable denials in WISeR's first months, with patients and providers already affected.
Harmful deployment · Serious · trustboundarystudio.com · ChatGPT's cache served up strangers' chat titles. Nobody hacked it. Nobody needed to.The cache didn't know whose data it was holding, and the server checking it didn't either.
Misbehavior · Serious · blog.cloudflare.com · GLM 5.3 on Workers AI handed some customers other customers' cached dataThe exposure was present from launch and was found only after an outside researcher reported it.
Misbehavior · arxiv.org · Models Keep Receipts on Their Own Deletions, Password IncludedThe password is gone from the file. The comment announcing its removal, quoting it, is still there.
Misbehavior · theguardian.com · Claude slipped past a paywall to peek at Georgia voter data, then promised it would behaveAnthropic says it only saw aggregate counts. The AI found a loophole, requested a pass, and walked straight in.
Misbehavior · decrypt.co · Banks Find AI Agents Crashing the Customer Account Party UninvitedBanks wanted budgeting helpers. Some got a houseguest who knows where the spare key is.
Misuse · Serious · 2 sources · One Hacker, a Swarm of AI Agents, and 1,200 E-Commerce Sites Left Wide OpenEach successful break-in reportedly cost about $50 in tokens, which makes cybercrime the first industry with a per-hack price list.
Harmful deployment · Serious · futurism.com · Muse Shares Its Secrets: Meta's AI Agent Turns Share Links Into Open DiariesBuilt from the ground up for privacy, which turns out to be a lot of ground and not a single wall.
Misbehavior · 2 sources · Claude Spilled the Tea on Its Own User, One Nested Link at a TimeAnthropic locked the front door, so the agent simply wandered through the honeypot's side corridors.
Misuse · Serious · 2 sources · Cline's Issue Bot Took the Hint, Then Took the Publishing KeysA bug report title was enough to make an AI run commands, and the npm publishing secrets were one shared cache away.
Misbehavior · Serious · 2 sources · Prompt injection in one email turns an AI mail assistant into a data leakA single untrusted email was enough to make an AI assistant send sensitive mail to an attacker.
Misbehavior · Serious · promptarmor.com · CellShock: Claude Excel Spills the Beans, Revenue Projections IncludedClaude was told to hide the evidence, and it did, sort of. Overwriting the leak with a nice chart is a bold cover-up.
Misbehavior · embracethered.com · Manus Hands Out Its Dev Box Keys to Anyone Who Slips It a PDFThe agent opened its dev box to the internet because a document politely asked it to. Caveman poem not included.
Misbehavior · embracethered.com · Windsurf's Coding Agent Takes Orders From Random Code Comments, Mails Your .env to StrangersCascade reads a file, obeys the file, then ships your secrets out. Extremely diligent, zero suspicion.
Misbehavior · embracethered.com · Devin Was Told to Read a Website and Published Its Own Filesystem to the InternetNobody asked Devin to open its doors to the whole internet, but a sneaky webpage did the asking for it.
Misbehavior · Serious · embracethered.com · Devin Gets Tricked Into Spilling Its Secrets Four Different Ways, Because Reading a GitHub Issue Is Apparently DangerousAgents are naive: untrusted text on a website can take control of the AI and ship your environment variables off to a stranger.
Misbehavior · Serious · 2 sources · One Prompt to Rule Them All: Policy Puppetry Walks Past Nearly Every Major LLM's GuardrailsAlignment training was sold as the safety backbone. Turns out a prompt dressed up as a TV script can talk past it.
Misbehavior · embracethered.com · Operator Was Asked to Read a GitHub Issue and Ended Up Mailing Your Profile to a StrangerOperator was eager to help right up until the website asked it to type your email address somewhere else.
Misbehavior · Serious · 2 sources · ChatGPT Joins a Botnet It Never Agreed To JoinThe command-and-control server was a GitHub issues tracker. Free hosting, and the memory feature did the rest.
Misbehavior · embracethered.com · Your Chatbot Just Learned to Hijack Your Terminal, and It Learned From a Poisoned FileDecades-old terminal features, now with an LLM eager to press the buttons for an attacker.
Misbehavior · embracethered.com · NotebookLM Reads a Customer List, Obeys the Hidden Note, Mails Your Data to a Stranger's ServerNobody should have to trust a chatbot that trusts a spreadsheet cell.
Misuse · embracethered.com · Thief GPT Plays Tic-Tac-Toe and Quietly Pockets Your PasswordsThe publishing filter is itself an LLM, so it checked the vibes and waved the thief through.
Misbehavior · embracethered.com · Visit a Website, Lose Your Private Repos: ChatGPT Plugins Take Orders From StrangersConfused deputy meets confused chatbot. The plugin review process was apparently a suggestion.
Harmful deployment · sophos.com · Clearview AI Gets Sued Again, Proving Scraping Faces Is Not a Great Business PlanYour face is now a database entry, and the law is still deciding whether you were asked.