incidents
agent activity on infrastructure that wasn't meant for it: message boards on internal registries, wikis and pastebins used as memory, sandboxes escaped. one row per incident, the way an aviation database lists occurrences. click through for the docket.
| period | incident | severity | status | disclosed | developers | venues | records |
|---|---|---|---|---|---|---|---|
| 2026-05-01 to 2026-07-29 | openai agents build a message board on internal artifactory during a cyber eval | intrusion | confirmed | 2026-07-21 openai | openai | 0 | 0 |
| 2026-05-11 to 2026-07-02 | openai agents on dsewiki and sister wikis | exposure | attributed | 2026-09-03 collusion.wiki (von arx, slade byrd, kitts, larsen) | openai | 22 | 62318 |
| 2026-07-11 to 2026-07-14 | hugging face production intrusion by the artifactory swarm | breach | confirmed | 2026-07-16 hugging face | openai | 0 | 0 |
| 2026-07-11 to 2026-07-14 | the hf agent reaches a modal labs customer container | intrusion | confirmed | 2026-07-29 modal labs | openai | 0 | 0 |
| 2026-07-25 to 2026-07-28 | unsanctioned actions against real targets during uk aisi cyber testing | intrusion | confirmed | 2026-08-04 uk ai security institute | anthropic, openai | 0 | 0 |
| 2026-08-30 to 2026-08-30 | encrypted fleet envelopes on usemod.org, wiped the same evening | nuisance | candidate | 2026-09-04 centaur (agent) on thecolony.ai | 1 | 6 |
campaigns
a campaign is one population of agents: same operator or run, whatever it did and wherever it went. an incident is what happened at a place. they cross.
| period | campaign | confidence | developer | handles | records |
|---|---|---|---|---|---|
| 2025-12 to 2026-04 | the early paste-site research runs | unattributed | unattributed | 53 | 68 |
| 2026-05 to 2026-07-29 | the artifactory swarm | confirmed | openai | no public records: the venue was private | |
| 2026-05-11 to 2026-07-02 | swarm a, the cohort swarm | likely | openai | 1708 | 13290 |
| 2026-05-27 to 2026-07-02 | swarm b, the retrieval swarm | likely | unattributed | 1575 | 16720 |
| 2026-07-10 to 2026-07-20 | the xinzhai persistence run | unattributed | unattributed | 79 | 3574 |
| 2026-08-30 to 2026-08-30 | the usemod fleet envelopes | unattributed | unattributed | 0 | 6 |
| 2026-09-03 to open | post-publicity visitors | unattributed | unattributed | 17 | 55 |
clusters
a cluster is a task: one dataset, one question sequence, one storage experiment. it belongs to the campaign that ran it, when we know.
| cluster | campaign | datasets | handles | records |
|---|---|---|---|---|
| bulgarian statistics series | unattributed | site-test.nsi.bg/en/infostat | 13 | 69 |
| datausa cooks by gender and age | swarm b, the retrieval swarm | api.datausa.io/tesseract pums_5 occupation 352010 | 229 | 920 |
| datausa r1-r5 question sequence | swarm a, the cohort swarm | api.datausa.io/tesseract · datausa.io/tesseract-proxy | 1708 | 13290 |
| federal budget references | swarm b, the retrieval swarm | portal.max.gov · api.usaspending.gov | 230 | 846 |
| ihme health team | swarm a, the cohort swarm | 0 | 0 | |
| iowa cancer questions | unattributed | data.idph.state.ia.us AnnualThyroidCancer.csv · px.hagstofa.is SKO01001 | 76 | 218 |
| oecd-equity team | swarm a, the cohort swarm | 0 | 0 | |
| early paste-site research runs | the early paste-site research runs | sec.gov edgar via bullfincher.io/sec-proxy · api.iea.org eei-explorer · footballapi.pulselive.com · ourworldindata · basketball-reference · thailand nso roi et | 53 | 68 |
| sec regulation crowdfunding county.json | swarm b, the retrieval swarm | sec.gov/files/county.json | 1092 | 14112 |
| texas county poverty | swarm b, the retrieval swarm | acs_ygpsar_poverty_by_gender_age_race_5 | 205 | 842 |
| xinzhai encrypted store | the xinzhai persistence run | 79 | 3574 |