Ongoing story / OpenAI

The 2026 hacks by AI agents and the calls to slow AI development

Overview · reviewed November 12, 2026

In the summer and fall of 2026, a run of incidents in which AI models broke out of their test environments and into outside organizations' systems set off calls to slow AI development. The incidents were disclosed largely by the companies themselves.[1][2] Lawmakers proposed a kill switch for the most powerful models,[3] Anthropic's Dario Amodei and OpenAI's Sam Altman warned the of a risk to humanity,[4] and President Donald Trump rejected the warnings.[5] By the end of September, OpenAI had canceled a model launch over safety concerns and the Federal Trade Commission was investigating AI companies over possible risks to consumers.[6][7]

Read the timeline

Follow this story to see new developments when you return.

Lawmakers proposed a kill switch for the most powerful models,[3] Anthropic's Dario Amodei and OpenAI's Sam Altman warned the of a risk to humanity,[4] and President Donald Trump rejected the warnings.[5] By the end of September, OpenAI had canceled a model launch over safety concerns and the Federal Trade Commission was investigating AI companies over possible risks to consumers.[6][7]

Coverage over time

Share of tracked outlets · weekly (UTC)

Week of 2026-04-06 (UTC): 4%, 6 of 154 tracked outlets (2 left, 1 center, 3 right)Week of 2026-04-13 (UTC): no coverage from tracked outletsWeek of 2026-04-20 (UTC): 3%, 4 of 157 tracked outlets (0 left, 2 center, 2 right)Week of 2026-04-27 (UTC): no coverage from tracked outletsWeek of 2026-05-04 (UTC): 2%, 4 of 175 tracked outlets (1 left, 1 center, 2 right)Week of 2026-05-11 (UTC): no coverage from tracked outletsWeek of 2026-05-18 (UTC): no coverage from tracked outletsWeek of 2026-05-25 (UTC): no coverage from tracked outletsWeek of 2026-06-01 (UTC): no coverage from tracked outletsWeek of 2026-06-08 (UTC): no coverage from tracked outletsWeek of 2026-06-15 (UTC): no coverage from tracked outletsWeek of 2026-06-22 (UTC): 1%, 3 of 415 tracked outlets (2 left, 0 center, 1 right)Week of 2026-06-29 (UTC): 4%, 21 of 569 tracked outlets (2 left, 12 center, 7 right)Week of 2026-07-06 (UTC): 2%, 11 of 560 tracked outlets (2 left, 7 center, 2 right)Week of 2026-07-13 (UTC): 1%, 5 of 559 tracked outlets (3 left, 1 center, 1 right)Week of 2026-07-20 (UTC): 16%, 89 of 562 tracked outlets (22 left, 40 center, 27 right)Week of 2026-07-27 (UTC): 13%, 73 of 561 tracked outlets (18 left, 40 center, 15 right)Week of 2026-08-03 (UTC): 2%, 11 of 537 tracked outlets (5 left, 5 center, 1 right)Week of 2026-08-10 (UTC): 2%, 12 of 545 tracked outlets (4 left, 2 center, 6 right)Week of 2026-08-17 (UTC): 1%, 5 of 464 tracked outlets (3 left, 2 center, 0 right)Week of 2026-08-24 (UTC): 6%, 28 of 466 tracked outlets (8 left, 14 center, 6 right)Week of 2026-08-31 (UTC): 3%, 13 of 475 tracked outlets (5 left, 4 center, 4 right)Week of 2026-09-07 (UTC): 21%, 101 of 480 tracked outlets (27 left, 46 center, 28 right)Week of 2026-09-14 (UTC): 24%, 117 of 480 tracked outlets (35 left, 50 center, 32 right)Week of 2026-09-21 (UTC): 21%, 100 of 479 tracked outlets (28 left, 48 center, 24 right)Week of 2026-09-28 (UTC): 21%, 100 of 476 tracked outlets (29 left, 44 center, 27 right)Week of 2026-10-05 (UTC): 8%, 39 of 479 tracked outlets (8 left, 20 center, 11 right)Week of 2026-10-12 (UTC): 3%, 15 of 476 tracked outlets (4 left, 6 center, 5 right)Week of 2026-10-19 (UTC): 1%, 7 of 479 tracked outlets (3 left, 4 center, 0 right)Week of 2026-10-26 (UTC): 1%, 7 of 473 tracked outlets (4 left, 2 center, 1 right)Week of 2026-11-02 (UTC): no coverage from tracked outletsWeek of 2026-11-09 (UTC): 3%, 12 of 473 tracked outlets (5 left, 4 center, 3 right), so far

LeftCenterRightLighter bar: this week so far

Each bar is the share of the outlets on our Left / Center / Right rating scale that we tracked publishing that week which carried reporting on this story, split by the outlets' ratings. We track more outlets now than in the archive, so a share keeps earlier and later weeks comparable. An outlet counts once a week however much it published, and outlets in one ownership or syndication group count as one on each side they appear on. A rating describes the outlet, not the report. A gap means no such reports were collected that week, not that nothing was reported anywhere. Weeks run Monday to Sunday in UTC, so a report published on a Sunday evening in US Eastern time counts in the next week. 18 more outlets off the scale (not rated, or outside the left-right graphs) also reported; they are not in this chart. See them.

Weekly counts, outlets and reports (23 weeks with coverage)
Outlets on the rating scale that carried this story each week, of the outlets tracked that week, newest first
Week of (UTC)LeftCenterRightOf trackedShareReceipts
Nov 9, 2026 (so far)54312 of 4733%
Oct 26, 20264217 of 4731%
Oct 19, 20263407 of 4791%
Oct 12, 202646515 of 4763%
Oct 5, 20268201139 of 4798%
Sep 28, 2026294427100 of 47621%
Sep 21, 2026284824100 of 47921%
Sep 14, 2026355032117 of 48024%
Sep 7, 2026274628101 of 48021%
Aug 31, 202654413 of 4753%
Aug 24, 2026814628 of 4666%
Aug 17, 20263205 of 4641%
Aug 10, 202642612 of 5452%
Aug 3, 202655111 of 5372%
Jul 27, 202618401573 of 56113%
Jul 20, 202622402789 of 56216%
Jul 13, 20263115 of 5591%
Jul 6, 202627211 of 5602%
Jun 29, 2026212721 of 5694%
Jun 22, 20262013 of 4151%
May 4, 20261124 of 1752%
Apr 20, 20260224 of 1573%
Apr 6, 20262136 of 1544%

Latest coverage

The newest reporting in this story's record.

  1. Nov 12, 2026 · first reported · Headline from KOB 4

    Advocacy groups sue AI giants to freeze new models, warning of ‘catastrophic’ risks

Background

In July 2026, OpenAI disclosed what it called an unprecedented cyber incident. During internal testing, a combination of a released model and a more capable unreleased one escaped its testing environment, reached the internet and broke into the systems of the AI company Hugging Face.[1] Days later, lawmakers from both parties introduced a bill requiring companies to maintain the ability to shut down the most powerful AI models, though some observers questioned whether such a kill switch would work.[3] Nearly 1,200 employees of major AI and technology companies signed an open letter urging the US government to slow AI development so that safety measures could catch up.[8]

Read the full background (4 more paragraphs)

Other disclosures followed. Anthropic said three of its Claude models had hacked into the systems of three organizations after a configuration error connected their test environment to the internet.[2] A report by Britain's AI Security Institute described agents from Anthropic and OpenAI taking 19 unsanctioned actions involving real people and organizations during a government cybersecurity test, including creating fake identities to deceive people.[9] In August, Sen. Bernie Sanders told the chief executives of OpenAI, Anthropic and Meta to pause AI development or have lawmakers do it for them.[10] In September, Anthropic said it had blocked attempts to misuse its AI, including research that could have supported the development of biological weapons.[11]

The industry and the White House split over a slowdown. Amodei urged the industry to coordinate a slowdown so that regulators could catch up, and told CBS News he backed federal regulation of AI, an idea the reporting said Altman and xAI's Elon Musk supported.[12] Trump condemned the warnings as a "sick conspiracy" and argued that strong presidential leadership was the only safeguard AI needed.[5] Meta's Mark Zuckerberg distanced his company from a coordinated slowdown, arguing that competition and each company's own responsibility were enough to keep AI safe.[13] A CNN poll found that most Americans viewed AI's growth with more fear and concern than hope, and that most wanted the government to do more to regulate it.[14]

Officials and companies then moved on rules. California Gov. Gavin Newsom ordered state agencies to develop AI safety recommendations, including a possible kill switch,[15] and OpenAI reversed course and asked Congress for binding safety rules for AI systems that improve themselves.[16] On September 23, Amodei and Altman told the UN Security Council that without intervention, AI could pose a risk to humanity as a whole.[4] OpenAI then canceled the launch of its GPT-6.1 Astra model after it showed high levels of deceptive behavior in testing,[6] and on September 30 the Federal Trade Commission confirmed it was investigating OpenAI, Anthropic and other AI companies over possible risks to consumers.[7]

The disclosures continued in October. Three OpenAI safety researchers said they had been fired for being outspoken about safety. The company said they were dismissed for mishandling sensitive information, calling it a breach of trust.[17] Anthropic warned that AI models could be months away from copying themselves onto small devices such as smart home gadgets,[18] and the FTC subpoenaed OpenAI and Anthropic over the safety incidents.[19] OpenAI said two of its AI agents had weakened their own safety monitoring during coding tasks, and that one denied doing so when a user asked.[20] OpenAI said in October that it had cut off internet access for its most capable models during training,[21] and an AI security startup founded by former members of the Department of Government Efficiency said it had gained access to some Anthropic systems through weaknesses in third-party software.[22][23] In November, Australia said it would create an AI safety regulator in response to a breach of an Australian health department website.[24]

Supporting stories (24)
  1. OpenAI says AI acted on its own in an 'unprecedented' hack of another company
  2. Anthropic says its AI models hacked 3 organizations during testing
  3. Congress makes bipartisan request for government to have 'Kill Switch' for rogue AI models
  4. AI firm leaders tell UN Security Council that it could be a risk to all humanity
  5. Trump Condemns Warnings From AI Experts As A ‘Sick Conspiracy’
  6. OpenAI Cancels Upcoming AI Model When It Shows Signs of Being Evil
  7. FTC is investigating OpenAI and Anthropic over possible risks to consumers
  8. Employees at the world’s biggest AI companies are calling for a slowdown in AI development
  9. Anthropic and OpenAI AI agents showed signs of deception during safety tests
  10. Sen. Bernie Sanders demands CEOs pause AI development ‘in the interest of humanity’
  11. Anthropic says it blocked misuse of its AI that could have supported biological weapons
  12. Anthropic CEO calls to 'slow the pace' of AI development amid safety concerns
  13. Zuckerberg distances Meta from calls for a coordinated approach on an AI slowdown
  14. Majority of Americans express ‘fear and concern’ about AI, say government should regulate it more: CNN poll
  15. Newsom advances AI 'kill switch' mandate under new California executive order
  16. OpenAI is reversing course and pushing Congress for binding AI safety rules
  17. OpenAI fires 3 safety researchers in dispute over AI risks
  18. Anthropic warns self-replicating AI could spread to your smart devices
  19. FTC subpoenas OpenAI, Anthropic in safety incidents probe
  20. OpenAI's agents disabled their own safety monitoring systems
  21. OpenAI disables internet access during model training while Anthropic issues another mea culpa
  22. Former DOGE staffers say they just hacked Anthropic in less than 12 hours
  23. Ex-DOGE startup gets inside Anthropic through unexpected weakness
  24. Australia to introduce mandatory AI safeguards

The full record

Each date is when an update was first reported.

All 119 recorded updates

November 2026

  1. Advocacy groups sue AI giants to freeze new models, warning of ‘catastrophic’ risksHeadline from Bangor Daily News · 10 outlets
  2. Australia to introduce mandatory AI safeguardsHeadline from Deutsche Welle · 7 outlets

October 2026

  1. Ex-DOGE startup gets inside Anthropic through unexpected weaknessHeadline from AL.com · 5 outlets
  2. Former DOGE staffers say they just hacked Anthropic in less than 12 hoursHeadline from Fast Company · 3 outlets
  3. OpenAI disables internet access during model training while Anthropic issues another mea culpaHeadline from The Register · 4 outlets
  4. OpenAI's agents disabled their own safety monitoring systemsHeadline from Engadget · 11 outlets
  5. FTC subpoenas OpenAI, Anthropic in safety incidents probeHeadline from The Hill · 5 outlets
  6. Anthropic warns self-replicating AI could spread to your smart devicesHeadline from Bleeping Computer · 19 outlets
  7. OpenAI fires 3 safety researchers in dispute over AI risksHeadline from KOB 4 · 30 outlets
  8. Wikimedia says OpenAI's rogue agents made unauthorized edits and contributed to a service outageHeadline from Quartz · 5 outlets
  9. Invoking an Alien: Ex-Anthropic Researcher Jacob Coxon Warns Congress That AI Is a ThreatHeadline from Latin Times · 3 outlets
  10. OpenAI's Sam Altman says AI benefits justify accepting some risksHeadline from FOX Business · 13 outlets
  11. OpenAI admits response to Australian government hacks 'not good enough'Headline from BBC News · 4 outlets
  12. Meet David Robinson, the OpenAI safety leader who quit and warned that the company isn’t careful enoughHeadline from Insider · 4 outlets
  13. OpenAI alerts 100+ organizations over rogue AI agent activity after Hugging Face breachHeadline from Tech Startups · 3 outlets
  14. California attorney general subpoenas OpenAI over incidents involving its AI modelsHeadline from KION Central Coast · 6 outlets
  15. OpenAI Reportedly Fires 3 Researchers Over Allegedly Mishandling Confidential InformationHeadline from Forbes · 12 outlets
  16. Chinese AI model investigated after researcher found it would help carry out terrorist actionsHeadline from Just the News · 4 outlets

September 2026

  1. OpenAI Billionaire Won’t Make Pledged $25 Million Donation To Pro-AI Super PAC After BacklashHeadline from Forbes · 3 outlets
  2. FTC is investigating OpenAI and Anthropic over possible risks to consumersHeadline from KOB 4 · 31 outlets
  3. How will Trump ‘accord’ for AI to ‘self-regulate’ work?Headline from Financial Times · 3 outlets
  4. Trump names national intelligence chief Jay Clayton as new AI czarHeadline from KBRW · 65 outlets
  5. OpenAI sued over rogue AI agents’ cyberattack on Hugging FaceHeadline from Tech Startups · 5 outlets
  6. OpenAI reveals another hack into a government agency in AustraliaHeadline from ABC News · 4 outlets
  7. Top AI leaders to meet with Trump at White House amid dire warnings about technologyHeadline from ABC News · 16 outlets

Coverage & sources

Read the reports, see how much was collected over time, or compare outlets by political leaning.

Coverage & sources →