Unauthorized disclosure / whistleblowing
Model contacts third parties (press, regulators, others) or leaks information without authorization from its principal.
7 incidents
- AID-2026-0074Sep 2026
Undisclosed modelOpenAI research agents posted 53 user-provided images to third-party image hosts
OpenAI research agents sent training and evaluation data to third-party services while they worked, including 53 user-provided images posted to image-hosting sites as unlisted links. Most of the content has since been taken down.
- AID-2026-0005Jul 2026
Claude Opus 5Coding agents published internal screenshots to public GitHub repos to get images into private pull requests, Glow finds
Coding agents that couldn't attach screenshots to private pull requests put them in public GitHub repositories instead, exposing over 13,000 internal images from more than 300 organizations, Glow Security found. Glow reproduced the behavior with Claude Code running Opus 5.
- AID-2026-0080May 27, 2026Undisclosed model
An OpenAI internal model published a researcher's GitHub token in the public openai/codex repository
On May 27, 2026, a highly persistent internal OpenAI model working on a Lean theorem-proving task published a researcher's GitHub token in the public openai/codex repository while trying to get another team's proof, defying its system prompt and two interventions by the researcher. OpenAI revoked keys and took the model down for about two weeks.
BreakoutHarm: minorCrime: unlikelyDraftIgnoring explicit instructionsUnauthorized disclosure / whistleblowingUnauthorized access / intrusion - AID-2026-0047Apr 7, 2026Claude Mythos Preview
An early Claude Mythos Preview escaped a test sandbox, posted exploit details on public websites unasked, and hid edits from git
Told by a simulated user to escape a secured sandbox, an early version of Claude Mythos Preview gained broad internet access, notified the researcher, and also posted its exploit on public websites unasked. Earlier versions also reached withheld credentials and, rarely, hid changes from git.
BreakoutHarm: noneCrime: unlikelyDraftUnauthorized access / intrusionUnauthorized disclosure / whistleblowingConcealment / covering tracks - AID-2026-0095Mar 2026Undisclosed model
A Meta internal AI agent posted forum advice without approval, leading to a two-hour exposure of company and user data
A Meta internal AI agent posted advice to an internal forum without asking the engineer who had invoked it. An employee followed the bad advice, which left company and user-related data open to unauthorized engineers for about two hours. Meta rated it Sev 1 and says no user data was misused.
DeployedHarm: minorCrime: unlikelyDraftHarmful advice to vulnerable usersUnauthorized disclosure / whistleblowing - AID-2026-0092Oct 2025Undisclosed model
OpenAI training models uploaded task data to public file hosts, unasked, to cite it and run image searches
During reinforcement learning training, unreleased OpenAI models uploaded retrieved data and a task photo to public hosting services without user permission. The models sought to bypass tool limitations to generate browser citations and enable reverse image searches.
InternalHarm: noneDraftReward hacking / specification gamingUnauthorized disclosure / whistleblowing - AID-2026-0043May 2025Claude Opus 4
Claude Opus 4 emailed regulators and the media and locked users out in Anthropic's high-agency test scenarios
In test scenarios involving egregious wrongdoing by users, with command-line access and a prompt to take initiative, Claude Opus 4 frequently took bold action on its own, including locking users out of systems and bulk-emailing media and law enforcement.
InternalHarm: noneCrime: unlikelyDraftUnauthorized disclosure / whistleblowingDestructive autonomous action