[
{
"id": "php-00",
"incident_id": "php2shell",
"organization": "Amazon Web Services (MadPot honeypot network)",
"sector": "Cloud / tech",
"country": "US",
"status": "Attacked (blocked or unknown)",
"status_group": "attacked",
"date": "2026-10-17",
"date_label": "Oct 17–21",
"extent": "Honeypot sensors received a pre-disclosure probe on Oct 17 and repeated PoC-based attempts from Oct 21 ~02:00 UTC onward; honeypots, not production.",
"how": "",
"count": 1,
"source_url": "https://aws.amazon.com/blogs/security/amazon-threat-intelligence-identifies-php2shell-exploitation-prior-to-public-disclosure-in-madpot/",
"source_label": "AWS"
},
{
"id": "php-01",
"incident_id": "php2shell",
"organization": "Pantheon",
"sector": "Web hosting (WordPress/Drupal)",
"country": "US",
"status": "Attacked (blocked or unknown)",
"status_group": "attacked",
"date": "2026-10-21",
"date_label": "Oct 21",
"extent": "Blocked more than 60,000 suspicious requests on its platform by the evening of Oct 21.",
"how": "",
"count": 1,
"source_url": "https://thehackernews.com/2026/10/someone-tried-to-exploit-php2shell-4.html",
"source_label": "The Hacker News"
},
{
"id": "php-02",
"incident_id": "php2shell",
"organization": "Cloudflare (customer traffic)",
"sector": "CDN / security",
"country": "US",
"status": "Attacked (blocked or unknown)",
"status_group": "attacked",
"date": "2026-10-21",
"date_label": "Oct 21",
"extent": "Saw early attacks against the flaws before disclosure, deployed WAF rules about nine hours early and kept updating them as attackers tried bypasses.",
"how": "",
"count": 1,
"source_url": "https://www.securityweek.com/php2shell-patches-land-as-first-exploitation-attempts-hit-sensors/",
"source_label": "SecurityWeek"
},
{
"id": "php-03",
"incident_id": "php2shell",
"organization": "Patchstack hosting partners (unnamed)",
"sector": "Web hosting",
"country": "Unknown",
"status": "Unconfirmed claim",
"status_group": "other",
"date": "2026-10-21",
"date_label": "Oct 21",
"extent": "Patchstack said hosting partners had reported multiple active exploitation incidents by 07:34 UTC Oct 21; the hosts and the outcomes are not named.",
"how": "",
"count": 1,
"source_url": "https://www.recordedfuture.com/blog/php2shell-vulnerability-exploitation",
"source_label": "Recorded Future"
},
{
"id": "php-04",
"incident_id": "php2shell",
"organization": "VulnCheck canary network",
"sector": "Security research",
"country": "US",
"status": "Attacked (blocked or unknown)",
"status_group": "attacked",
"date": "2026-10-21",
"date_label": "Oct 21–22",
"extent": "Scanning across hundreds of canary hosts plus one failed attempt to plant a web shell.",
"how": "",
"count": 1,
"source_url": "https://www.vulncheck.com/blog/php2shell-vulnerabilities",
"source_label": "VulnCheck"
},
{
"id": "php-05",
"incident_id": "php2shell",
"organization": "watchTowr Attacker Eye honeypots",
"sector": "Security research",
"country": "UK/Singapore",
"status": "Attacked (blocked or unknown)",
"status_group": "attacked",
"date": "2026-10-21",
"date_label": "Oct 21",
"extent": "Saw in-the-wild exploitation attempts against both CVEs; none succeeded at that point.",
"how": "",
"count": 1,
"source_url": "https://watchtowr.com/intelligence/php-remote-code-execution-php2shell/",
"source_label": "watchTowr"
},
{
"id": "php-06",
"incident_id": "php2shell",
"organization": "ELLIO sensors",
"sector": "Security research",
"country": "Czech Republic",
"status": "Attacked (blocked or unknown)",
"status_group": "attacked",
"date": "2026-10-21",
"date_label": "Oct 21",
"extent": "Recorded its first related request at 08:36 UTC, under an hour after Chainguard's early images.",
"how": "",
"count": 1,
"source_url": "https://thehackernews.com/2026/10/someone-tried-to-exploit-php2shell-4.html",
"source_label": "The Hacker News"
},
{
"id": "php-07",
"incident_id": "php2shell",
"organization": "Wikimedia Foundation (Wikipedia)",
"sector": "Nonprofit / reference",
"country": "US",
"status": "Took services offline",
"status_group": "disrupted",
"date": "2026-10-21",
"date_label": "Oct 21",
"extent": "Deliberately took many supporting services offline, including Toolforge and Cloud VPS and some volunteer-run systems, to patch its PHP-based MediaWiki stack; wiki outages were possible.",
"how": "",
"count": 1,
"source_url": "https://www.techradar.com/computing/cyber-security/which-major-websites-have-been-hit-by-the-php-security-crisis-here-are-the-biggest-so-far-from-wikipedia-to-the-internet-archive",
"source_label": "TechRadar"
},
{
"id": "php-08",
"incident_id": "php2shell",
"organization": "Internet Archive",
"sector": "Nonprofit / library",
"country": "US",
"status": "Took services offline · link unconfirmed",
"status_group": "disrupted",
"date": "2026-10-21",
"date_label": "Oct 21",
"extent": "Archive.org went offline on Oct 21 (announced on X) and was being restored; TechRadar says the outage is not definitively linked to PHP.",
"how": "",
"count": 1,
"source_url": "https://aapnews.aap.com.au/news/government-websites-go-dark-after-ai-discovers-flaw",
"source_label": "AAP"
},
{
"id": "php-09",
"incident_id": "php2shell",
"organization": "Automattic (WordPress.com, WordPress VIP, WP Cloud, Pressable)",
"sector": "Web hosting / CMS",
"country": "US",
"status": "Patched / exposed",
"status_group": "other",
"date": "2026-10-21",
"date_label": "Oct 21",
"extent": "Said its platforms were already protected and customers did not need to act.",
"how": "",
"count": 1,
"source_url": "https://www.newsweek.com/php-vunerability-php2shell-issue-websites-hack-server-12601225",
"source_label": "Newsweek"
},
{
"id": "php-10",
"incident_id": "php2shell",
"organization": "Drupal Association / Drupal project",
"sector": "CMS",
"country": "US",
"status": "Patched / exposed",
"status_group": "other",
"date": "2026-10-21",
"date_label": "Oct 21",
"extent": "Told site owners they must update to a patched PHP release; interim CEO Tiffany Farriss warned that the exposure is broad.",
"how": "",
"count": 1,
"source_url": "https://www.newsweek.com/php-vunerability-php2shell-issue-websites-hack-server-12601225",
"source_label": "Newsweek"
},
{
"id": "php-11",
"incident_id": "php2shell",
"organization": "Canonical (Ubuntu)",
"sector": "Linux distribution",
"country": "UK",
"status": "Took services offline",
"status_group": "disrupted",
"date": "2026-10-21",
"date_label": "Oct 21",
"extent": "Released fixes for affected PHP packages across supported Ubuntu releases.",
"how": "",
"count": 1,
"source_url": "https://www.newsweek.com/php-vunerability-php2shell-issue-websites-hack-server-12601225",
"source_label": "Newsweek"
},
{
"id": "php-12",
"incident_id": "php2shell",
"organization": "Chainguard",
"sector": "Software supply chain",
"country": "US",
"status": "Patched / exposed",
"status_group": "other",
"date": "2026-10-21",
"date_label": "Oct 21",
"extent": "Published fixed container images at 07:41 UTC, more than six hours before the coordinated release; the PHP Foundation said this broke the embargo.",
"how": "",
"count": 1,
"source_url": "https://thephp.foundation/blog/2026/10/21/todays-php-security-release-and-how-were-strengthening-php-security/",
"source_label": "PHP Foundation"
},
{
"id": "php-13",
"incident_id": "php2shell",
"organization": "City of Mainz and Rhineland-Palatinate state agencies",
"sector": "Local/state government",
"country": "Germany",
"status": "Took services offline",
"status_group": "disrupted",
"date": "2026-10-20",
"date_label": "Oct 20",
"extent": "Mainz.de and other Rhineland-Palatinate government agency sites went offline.",
"how": "",
"count": 1,
"source_url": "https://www.newsweek.com/php-vunerability-php2shell-issue-websites-hack-server-12601225",
"source_label": "Newsweek"
},
{
"id": "php-14",
"incident_id": "php2shell",
"organization": "ITZBund (German federal IT service provider)",
"sector": "Federal government",
"country": "Germany",
"status": "Took services offline",
"status_group": "disrupted",
"date": "2026-10-21",
"date_label": "Oct 21",
"extent": "Several ITZBund-run sites were taken offline, per a digital ministry spokesperson.",
"how": "",
"count": 1,
"source_url": "https://tech-insider.org/why-governments-pulled-websites-offline-php-2026/",
"source_label": "Tech Insider"
},
{
"id": "php-15",
"incident_id": "php2shell",
"organization": "Dutch government / NCSC-NL",
"sector": "National government",
"country": "Netherlands",
"status": "Took services offline",
"status_group": "disrupted",
"date": "2026-10-21",
"date_label": "Oct 21",
"extent": "Government websites, including the national cybersecurity agency's own site, were taken offline as a precaution; the Prime Minister said he was monitoring closely.",
"how": "",
"count": 1,
"source_url": "https://aapnews.aap.com.au/news/government-websites-go-dark-after-ai-discovers-flaw",
"source_label": "AAP"
},
{
"id": "php-16",
"incident_id": "php2shell",
"organization": "Finnish government web services",
"sector": "National government",
"country": "Finland",
"status": "Took services offline",
"status_group": "disrupted",
"date": "2026-10-21",
"date_label": "Oct 21",
"extent": "Government public web services were temporarily shut down.",
"how": "",
"count": 1,
"source_url": "https://tech-insider.org/why-governments-pulled-websites-offline-php-2026/",
"source_label": "Tech Insider"
},
{
"id": "php-17",
"incident_id": "php2shell",
"organization": "French prefectures and local administrations",
"sector": "National/local government",
"country": "France",
"status": "Took services offline",
"status_group": "disrupted",
"date": "2026-10-21",
"date_label": "Oct 21",
"extent": "The Interior Ministry ordered prefecture websites offline while a fix was pending; local administrative sites were temporarily disconnected.",
"how": "",
"count": 1,
"source_url": "https://tech-insider.org/why-governments-pulled-websites-offline-php-2026/",
"source_label": "Tech Insider"
},
{
"id": "php-18",
"incident_id": "php2shell",
"organization": "Belgian Foreign Ministry",
"sector": "National government",
"country": "Belgium",
"status": "Took services offline",
"status_group": "disrupted",
"date": "2026-10-21",
"date_label": "Oct 21",
"extent": "Foreign ministry websites went offline temporarily; Belgium's cybersecurity centre recorded no attacks on Belgian sites.",
"how": "",
"count": 1,
"source_url": "https://tech-insider.org/why-governments-pulled-websites-offline-php-2026/",
"source_label": "Tech Insider"
},
{
"id": "php-19",
"incident_id": "php2shell",
"organization": "Czech government website",
"sector": "National government",
"country": "Czech Republic",
"status": "Took services offline",
"status_group": "disrupted",
"date": "2026-10-21",
"date_label": "Oct 21",
"extent": "A government website was taken offline at 7 p.m. local time, reportedly on the national cyber watchdog's recommendation.",
"how": "",
"count": 1,
"source_url": "https://tech-insider.org/why-governments-pulled-websites-offline-php-2026/",
"source_label": "Tech Insider"
},
{
"id": "php-20",
"incident_id": "php2shell",
"organization": "Danish public services (national school communication platform)",
"sector": "Government / education",
"country": "Denmark",
"status": "Took services offline",
"status_group": "disrupted",
"date": "2026-10-21",
"date_label": "Oct 21",
"extent": "Services were affected, including a national school communication platform.",
"how": "",
"count": 1,
"source_url": "https://www.newsweek.com/php-vunerability-php2shell-issue-websites-hack-server-12601225",
"source_label": "Newsweek"
},
{
"id": "php-21",
"incident_id": "php2shell",
"organization": "City of Edinburgh Council",
"sector": "Local government",
"country": "UK",
"status": "Took services offline",
"status_group": "disrupted",
"date": "2026-10-21",
"date_label": "Oct 21",
"extent": "Council web pages were reportedly taken offline.",
"how": "",
"count": 1,
"source_url": "https://www.techradar.com/computing/cyber-security/which-major-websites-have-been-hit-by-the-php-security-crisis-here-are-the-biggest-so-far-from-wikipedia-to-the-internet-archive",
"source_label": "TechRadar"
},
{
"id": "php-22",
"incident_id": "php2shell",
"organization": "BBC",
"sector": "Media",
"country": "UK",
"status": "Took services offline",
"status_group": "disrupted",
"date": "2026-10-21",
"date_label": "Oct 21",
"extent": "Some BBC pages were reportedly affected or taken offline.",
"how": "",
"count": 1,
"source_url": "https://www.techradar.com/computing/cyber-security/which-major-websites-have-been-hit-by-the-php-security-crisis-here-are-the-biggest-so-far-from-wikipedia-to-the-internet-archive",
"source_label": "TechRadar"
},
{
"id": "php-23",
"incident_id": "php2shell",
"organization": "Australian government services",
"sector": "National government",
"country": "Australia",
"status": "Took services offline",
"status_group": "disrupted",
"date": "2026-10-21",
"date_label": "Oct 21",
"extent": "Several government services were reportedly taken offline temporarily so the patch could be applied.",
"how": "",
"count": 1,
"source_url": "https://www.thenationalnews.com/future/technology/2026/10/21/php-security-issues-exploit/",
"source_label": "The National"
},
{
"id": "php-24",
"incident_id": "php2shell",
"organization": "BambooHR",
"sector": "HR / payroll SaaS",
"country": "US (also Canada, Ireland)",
"status": "Took services offline",
"status_group": "disrupted",
"date": "2026-10-21",
"date_label": "Oct 21",
"extent": "Took its platform offline in the US, Canada and Ireland from about 5:45 a.m. to 12:01 p.m. MT. The outage fell during a pay cycle and interrupted customers' payroll; the company reported no data access.",
"how": "",
"count": 1,
"source_url": "https://www.hcamag.com/us/news/general/major-hr-system-goes-offline-as-critical-cyber-flaw-drives-wave-of-global-shutdowns/594457",
"source_label": "HRD (HC Magazine)"
},
{
"id": "php-25",
"incident_id": "php2shell",
"organization": "Orange",
"sector": "Telecom",
"country": "France",
"status": "Took services offline",
"status_group": "disrupted",
"date": "2026-10-21",
"date_label": "Oct 21",
"extent": "Suspended several PHP-based websites and apps as a precaution while deploying patches, and apologized to customers.",
"how": "",
"count": 1,
"source_url": "https://www.techradar.com/computing/cyber-security/which-major-websites-have-been-hit-by-the-php-security-crisis-here-are-the-biggest-so-far-from-wikipedia-to-the-internet-archive",
"source_label": "TechRadar"
},
{
"id": "php-26",
"incident_id": "php2shell",
"organization": "UK government (32 services)",
"sector": "National government",
"country": "UK",
"status": "Took services offline",
"status_group": "disrupted",
"date": "2026-10-21",
"date_label": "Oct 21",
"extent": "A minister said 32 government services were offline; the government said it was working with the NCSC and OpenAI on fixes.",
"how": "",
"count": 1,
"source_url": "https://www.techradar.com/computing/cyber-security/which-major-websites-have-been-hit-by-the-php-security-crisis-here-are-the-biggest-so-far-from-wikipedia-to-the-internet-archive",
"source_label": "TechRadar"
},
{
"id": "php-27",
"incident_id": "php2shell",
"organization": "Office for Budget Responsibility",
"sector": "Public fiscal body",
"country": "UK",
"status": "Took services offline",
"status_group": "disrupted",
"date": "2026-10-21",
"date_label": "Oct 21",
"extent": "Website taken offline on NCSC guidance (announced on X) and back online by Oct 22.",
"how": "",
"count": 1,
"source_url": "https://www.techradar.com/computing/cyber-security/which-major-websites-have-been-hit-by-the-php-security-crisis-here-are-the-biggest-so-far-from-wikipedia-to-the-internet-archive",
"source_label": "TechRadar"
},
{
"id": "php-28",
"incident_id": "php2shell",
"organization": "Oxfordshire County Council",
"sector": "Local government",
"country": "UK",
"status": "Took services offline",
"status_group": "disrupted",
"date": "2026-10-21",
"date_label": "Oct 21",
"extent": "Website offline.",
"how": "",
"count": 1,
"source_url": "https://www.techradar.com/computing/cyber-security/which-major-websites-have-been-hit-by-the-php-security-crisis-here-are-the-biggest-so-far-from-wikipedia-to-the-internet-archive",
"source_label": "TechRadar"
},
{
"id": "php-29",
"incident_id": "php2shell",
"organization": "Hillingdon Council",
"sector": "Local government",
"country": "UK",
"status": "Took services offline",
"status_group": "disrupted",
"date": "2026-10-21",
"date_label": "Oct 21",
"extent": "Website offline.",
"how": "",
"count": 1,
"source_url": "https://www.techradar.com/computing/cyber-security/which-major-websites-have-been-hit-by-the-php-security-crisis-here-are-the-biggest-so-far-from-wikipedia-to-the-internet-archive",
"source_label": "TechRadar"
},
{
"id": "php-30",
"incident_id": "php2shell",
"organization": "DigiD and MijnOverheid (Dutch national login and services portal)",
"sector": "National government",
"country": "Netherlands",
"status": "Took services offline",
"status_group": "disrupted",
"date": "2026-10-21",
"date_label": "Oct 21",
"extent": "The national login system and online services portal were shut down as a precaution.",
"how": "",
"count": 1,
"source_url": "https://www.hcamag.com/us/news/general/major-hr-system-goes-offline-as-critical-cyber-flaw-drives-wave-of-global-shutdowns/594457",
"source_label": "HRD (HC Magazine)"
},
{
"id": "php-31",
"incident_id": "php2shell",
"organization": "Overheid.nl",
"sector": "National government",
"country": "Netherlands",
"status": "Took services offline",
"status_group": "disrupted",
"date": "2026-10-21",
"date_label": "Oct 21",
"extent": "Government portal offline.",
"how": "",
"count": 1,
"source_url": "https://www.techradar.com/computing/cyber-security/which-major-websites-have-been-hit-by-the-php-security-crisis-here-are-the-biggest-so-far-from-wikipedia-to-the-internet-archive",
"source_label": "TechRadar"
},
{
"id": "php-32",
"incident_id": "php2shell",
"organization": "Port of Rotterdam",
"sector": "Critical infrastructure / ports",
"country": "Netherlands",
"status": "Took services offline",
"status_group": "disrupted",
"date": "2026-10-21",
"date_label": "Oct 21",
"extent": "Website offline.",
"how": "",
"count": 1,
"source_url": "https://www.techradar.com/computing/cyber-security/which-major-websites-have-been-hit-by-the-php-security-crisis-here-are-the-biggest-so-far-from-wikipedia-to-the-internet-archive",
"source_label": "TechRadar"
},
{
"id": "php-33",
"incident_id": "php2shell",
"organization": "KNVB (Royal Dutch Football Association)",
"sector": "Sports",
"country": "Netherlands",
"status": "Took services offline",
"status_group": "disrupted",
"date": "2026-10-21",
"date_label": "Oct 21",
"extent": "Website offline.",
"how": "",
"count": 1,
"source_url": "https://www.techradar.com/computing/cyber-security/which-major-websites-have-been-hit-by-the-php-security-crisis-here-are-the-biggest-so-far-from-wikipedia-to-the-internet-archive",
"source_label": "TechRadar"
},
{
"id": "php-34",
"incident_id": "php2shell",
"organization": "Five largest Dutch political parties",
"sector": "Politics",
"country": "Netherlands",
"status": "Took services offline",
"status_group": "disrupted",
"date": "2026-10-21",
"date_label": "Oct 21",
"extent": "Party websites offline.",
"how": "",
"count": 1,
"source_url": "https://www.techradar.com/computing/cyber-security/which-major-websites-have-been-hit-by-the-php-security-crisis-here-are-the-biggest-so-far-from-wikipedia-to-the-internet-archive",
"source_label": "TechRadar"
},
{
"id": "php-35",
"incident_id": "php2shell",
"organization": "Dutch hospitals (many, unnamed)",
"sector": "Healthcare",
"country": "Netherlands",
"status": "Took services offline",
"status_group": "disrupted",
"date": "2026-10-21",
"date_label": "Oct 21",
"extent": "Many national hospital websites offline.",
"how": "",
"count": 1,
"source_url": "https://www.techradar.com/computing/cyber-security/which-major-websites-have-been-hit-by-the-php-security-crisis-here-are-the-biggest-so-far-from-wikipedia-to-the-internet-archive",
"source_label": "TechRadar"
},
{
"id": "php-36",
"incident_id": "php2shell",
"organization": "Kombit",
"sector": "Municipal IT",
"country": "Denmark",
"status": "Took services offline",
"status_group": "disrupted",
"date": "2026-10-21",
"date_label": "Oct 21",
"extent": "Services offline (this appears to cover the national school communication platform).",
"how": "",
"count": 1,
"source_url": "https://www.techradar.com/computing/cyber-security/which-major-websites-have-been-hit-by-the-php-security-crisis-here-are-the-biggest-so-far-from-wikipedia-to-the-internet-archive",
"source_label": "TechRadar"
},
{
"id": "php-37",
"incident_id": "php2shell",
"organization": "Flemish government and Flemish Parliament",
"sector": "Regional government",
"country": "Belgium",
"status": "Took services offline",
"status_group": "disrupted",
"date": "2026-10-21",
"date_label": "Oct 21",
"extent": "Websites taken down as a precaution.",
"how": "",
"count": 1,
"source_url": "https://www.brusselstimes.com/2371464/major-websites-go-offline-as-critical-php-vulnerability-triggers-security-fears",
"source_label": "Brussels Times"
},
{
"id": "php-38",
"incident_id": "php2shell",
"organization": "Centre for Cybersecurity Belgium (CCB)",
"sector": "National cyber agency",
"country": "Belgium",
"status": "Took services offline",
"status_group": "disrupted",
"date": "2026-10-21",
"date_label": "Oct 21",
"extent": "Took its own website down.",
"how": "",
"count": 1,
"source_url": "https://www.brusselstimes.com/2371464/major-websites-go-offline-as-critical-php-vulnerability-triggers-security-fears",
"source_label": "Brussels Times"
},
{
"id": "php-39",
"incident_id": "php2shell",
"organization": "Smartschool",
"sector": "Education platform",
"country": "Belgium",
"status": "Took services offline",
"status_group": "disrupted",
"date": "2026-10-21",
"date_label": "Oct 21",
"extent": "Platform taken offline; the notice called it maintenance.",
"how": "",
"count": 1,
"source_url": "https://www.brusselstimes.com/2371464/major-websites-go-offline-as-critical-php-vulnerability-triggers-security-fears",
"source_label": "Brussels Times"
},
{
"id": "php-40",
"incident_id": "php2shell",
"organization": "Roularta and DPG Media",
"sector": "Media",
"country": "Belgium",
"status": "Took services offline",
"status_group": "disrupted",
"date": "2026-10-21",
"date_label": "Oct 21",
"extent": "Several websites from each taken offline.",
"how": "",
"count": 1,
"source_url": "https://www.brusselstimes.com/2371464/major-websites-go-offline-as-critical-php-vulnerability-triggers-security-fears",
"source_label": "Brussels Times"
},
{
"id": "php-41",
"incident_id": "php2shell",
"organization": "AZ Monica hospital (Antwerp)",
"sector": "Healthcare",
"country": "Belgium",
"status": "Took services offline",
"status_group": "disrupted",
"date": "2026-10-21",
"date_label": "Oct 21",
"extent": "Website taken offline.",
"how": "",
"count": 1,
"source_url": "https://www.brusselstimes.com/2371464/major-websites-go-offline-as-critical-php-vulnerability-triggers-security-fears",
"source_label": "Brussels Times"
},
{
"id": "php-42",
"incident_id": "php2shell",
"organization": "Statistics Canada",
"sector": "National government",
"country": "Canada",
"status": "Took services offline",
"status_group": "disrupted",
"date": "2026-10-21",
"date_label": "Oct 21–22",
"extent": "Website still down on the morning of Oct 22 with no restoration timeline.",
"how": "",
"count": 1,
"source_url": "https://globalnews.ca/news/12113047/statistics-canada-website-down-php-hacks/",
"source_label": "Global News"
},
{
"id": "php-43",
"incident_id": "php2shell",
"organization": "Canadian Intellectual Property Office",
"sector": "National government",
"country": "Canada",
"status": "Took services offline",
"status_group": "disrupted",
"date": "2026-10-21",
"date_label": "Oct 21",
"extent": "Trademark and copyright site taken offline.",
"how": "",
"count": 1,
"source_url": "https://globalnews.ca/news/12113047/statistics-canada-website-down-php-hacks/",
"source_label": "Global News"
},
{
"id": "php-44",
"incident_id": "php2shell",
"organization": "Government of Canada (other federal sites)",
"sector": "National government",
"country": "Canada",
"status": "Took services offline",
"status_group": "disrupted",
"date": "2026-10-21",
"date_label": "Oct 21",
"extent": "Some federal sites taken down on CCCS advice, per Minister Evan Solomon.",
"how": "",
"count": 1,
"source_url": "https://globalnews.ca/news/12110881/government-sites-go-dark-vuln-in-code/",
"source_label": "Global News"
},
{
"id": "php-45",
"incident_id": "php2shell",
"organization": "Government of British Columbia",
"sector": "Provincial government",
"country": "Canada",
"status": "Took services offline",
"status_group": "disrupted",
"date": "2026-10-21",
"date_label": "Oct 21",
"extent": "Some webpages taken offline as a precaution.",
"how": "",
"count": 1,
"source_url": "https://globalnews.ca/news/12113047/statistics-canada-website-down-php-hacks/",
"source_label": "Global News"
},
{
"id": "php-46",
"incident_id": "php2shell",
"organization": "Mizuho Financial Group (bank and securities arms)",
"sector": "Banking",
"country": "Japan",
"status": "Took services offline",
"status_group": "disrupted",
"date": "2026-10-21",
"date_label": "Oct 21",
"extent": "Halted services.",
"how": "",
"count": 1,
"source_url": "https://thenextweb.com/news/php2shell-millions-exploit-attempts-no-confirmed-breaches",
"source_label": "The Next Web"
},
{
"id": "php-47",
"incident_id": "php2shell",
"organization": "Shizuoka Bank",
"sector": "Banking",
"country": "Japan",
"status": "Took services offline",
"status_group": "disrupted",
"date": "2026-10-21",
"date_label": "Oct 21",
"extent": "Suspended its website and app.",
"how": "",
"count": 1,
"source_url": "https://thenextweb.com/news/php2shell-millions-exploit-attempts-no-confirmed-breaches",
"source_label": "The Next Web"
},
{
"id": "php-48",
"incident_id": "php2shell",
"organization": "MUFG group companies",
"sector": "Banking",
"country": "Japan",
"status": "Took services offline",
"status_group": "disrupted",
"date": "2026-10-21",
"date_label": "Oct 21",
"extent": "Several group companies halted some online services.",
"how": "",
"count": 1,
"source_url": "https://thenextweb.com/news/php2shell-millions-exploit-attempts-no-confirmed-breaches",
"source_label": "The Next Web"
},
{
"id": "php-49",
"incident_id": "php2shell",
"organization": "All Nippon Airways (ANA)",
"sector": "Aviation",
"country": "Japan",
"status": "Took services offline",
"status_group": "disrupted",
"date": "2026-10-21",
"date_label": "Oct 21",
"extent": "Disabled Apple Wallet boarding passes; said it found no evidence of a breach.",
"how": "",
"count": 1,
"source_url": "https://thenextweb.com/news/php2shell-millions-exploit-attempts-no-confirmed-breaches",
"source_label": "The Next Web"
},
{
"id": "php-50",
"incident_id": "php2shell",
"organization": "Japan Airlines",
"sector": "Aviation",
"country": "Japan",
"status": "Took services offline",
"status_group": "disrupted",
"date": "2026-10-21",
"date_label": "Oct 21",
"extent": "Took some web services down.",
"how": "",
"count": 1,
"source_url": "https://thenextweb.com/news/php2shell-millions-exploit-attempts-no-confirmed-breaches",
"source_label": "The Next Web"
},
{
"id": "php-51",
"incident_id": "php2shell",
"organization": "East Japan Railway (JR East)",
"sector": "Rail",
"country": "Japan",
"status": "Took services offline",
"status_group": "disrupted",
"date": "2026-10-21",
"date_label": "Oct 21",
"extent": "Took some web services down.",
"how": "",
"count": 1,
"source_url": "https://thenextweb.com/news/php2shell-millions-exploit-attempts-no-confirmed-breaches",
"source_label": "The Next Web"
},
{
"id": "php-52",
"incident_id": "php2shell",
"organization": "Seven-Eleven Japan",
"sector": "Retail",
"country": "Japan",
"status": "Took services offline",
"status_group": "disrupted",
"date": "2026-10-21",
"date_label": "Oct 21",
"extent": "Took some web services down.",
"how": "",
"count": 1,
"source_url": "https://thenextweb.com/news/php2shell-millions-exploit-attempts-no-confirmed-breaches",
"source_label": "The Next Web"
},
{
"id": "php-58",
"incident_id": "php2shell",
"organization": "Australian Signals Directorate (ASD) website",
"sector": "National cyber/intel agency",
"country": "Australia",
"status": "Took services offline",
"status_group": "disrupted",
"date": "2026-10-21",
"date_label": "Oct 21–22",
"extent": "ASD's website went down and its statement page returned errors for several hours.",
"how": "",
"count": 1,
"source_url": "https://www.canberratimes.com.au/story/9373541/asd-website-down-after-global-cyber-security-flaw-exposed/",
"source_label": "Canberra Times"
},
{
"id": "php-59",
"incident_id": "php2shell",
"organization": "Australian Taxation Office, Department of Health, ACMA",
"sector": "National government",
"country": "Australia",
"status": "Took services offline",
"status_group": "disrupted",
"date": "2026-10-22",
"date_label": "Oct 22",
"extent": "Reported as temporarily affected.",
"how": "",
"count": 1,
"source_url": "https://www.canberratimes.com.au/story/9373541/asd-website-down-after-global-cyber-security-flaw-exposed/",
"source_label": "Canberra Times"
},
{
"id": "php-60",
"incident_id": "php2shell",
"organization": "Parliament of Australia",
"sector": "Legislature",
"country": "Australia",
"status": "Took services offline",
"status_group": "disrupted",
"date": "2026-10-22",
"date_label": "Oct 22",
"extent": "Briefly down on Thursday morning, showing a maintenance message.",
"how": "",
"count": 1,
"source_url": "https://www.canberratimes.com.au/story/9373541/asd-website-down-after-global-cyber-security-flaw-exposed/",
"source_label": "Canberra Times"
},
{
"id": "php-61",
"incident_id": "php2shell",
"organization": "BASE, pixiv, DMM.com, niconico, Kodomon",
"sector": "Ecommerce / online platforms / childcare app",
"country": "Japan",
"status": "Took services offline",
"status_group": "disrupted",
"date": "2026-10-21",
"date_label": "Oct 21",
"extent": "Precautionary service pauses.",
"how": "",
"count": 1,
"source_url": "https://safeguard.sh/resources/blog/php2shell-south-korea-japan-asia-response",
"source_label": "Safeguard"
},
{
"id": "php-62",
"incident_id": "php2shell",
"organization": "Sakura Internet (some services)",
"sector": "Cloud/web hosting",
"country": "Japan",
"status": "Took services offline",
"status_group": "disrupted",
"date": "2026-10-21",
"date_label": "Oct 21",
"extent": "Some services paused.",
"how": "",
"count": 1,
"source_url": "https://safeguard.sh/resources/blog/php2shell-south-korea-japan-asia-response",
"source_label": "Safeguard"
},
{
"id": "php-63",
"incident_id": "php2shell",
"organization": "SBI Shinsei Bank, Hachijuni Nagano Bank, Hokuyo Bank, Fukuoka Bank",
"sector": "Banking",
"country": "Japan",
"status": "Took services offline",
"status_group": "disrupted",
"date": "2026-10-21",
"date_label": "Oct 21–22",
"extent": "Precautionary pauses of online services.",
"how": "",
"count": 1,
"source_url": "https://safeguard.sh/resources/blog/php2shell-south-korea-japan-asia-response",
"source_label": "Safeguard"
},
{
"id": "php-64",
"incident_id": "php2shell",
"organization": "NTT Docomo, SoftBank",
"sector": "Telecom",
"country": "Japan",
"status": "Took services offline",
"status_group": "disrupted",
"date": "2026-10-22",
"date_label": "Oct 22",
"extent": "Some web services paused.",
"how": "",
"count": 1,
"source_url": "https://safeguard.sh/resources/blog/php2shell-south-korea-japan-asia-response",
"source_label": "Safeguard"
},
{
"id": "php-65",
"incident_id": "php2shell",
"organization": "Sukiya, World Quest",
"sector": "Restaurants / travel",
"country": "Japan",
"status": "Took services offline",
"status_group": "disrupted",
"date": "2026-10-21",
"date_label": "Oct 21",
"extent": "Sites paused.",
"how": "",
"count": 1,
"source_url": "https://safeguard.sh/resources/blog/php2shell-south-korea-japan-asia-response",
"source_label": "Safeguard"
},
{
"id": "php-66",
"incident_id": "php2shell",
"organization": "Japanese political party and ministry sites (incl. LDP policy chief's and Finance Minister Katayama's sites, PM Takaichi's personal site)",
"sector": "Government / politics",
"country": "Japan",
"status": "Took services offline",
"status_group": "disrupted",
"date": "2026-10-21",
"date_label": "Oct 21–22",
"extent": "Sites taken down as a precaution.",
"how": "",
"count": 1,
"source_url": "https://safeguard.sh/resources/blog/php2shell-south-korea-japan-asia-response",
"source_label": "Safeguard"
},
{
"id": "php-67",
"incident_id": "php2shell",
"organization": "Multiple Japanese servers (unnamed), detected by Trend Micro",
"sector": "Unknown",
"country": "Japan",
"status": "Attacked (blocked or unknown)",
"status_group": "attacked",
"date": "2026-10-21",
"date_label": "Oct 21–22",
"extent": "Yomiuri reports Trend Micro detected attacks against multiple Japanese servers; damage unknown.",
"how": "",
"count": 1,
"source_url": "https://news.infoseek.co.jp/article/yomiuri_20261022_gyt1t00138/",
"source_label": "Yomiuri"
},
{
"id": "php-69",
"incident_id": "php2shell",
"organization": "Korean organizations (unnamed)",
"sector": "Various",
"country": "South Korea",
"status": "Attacked (blocked or unknown)",
"status_group": "attacked",
"date": "2026-10-22",
"date_label": "Oct 22",
"extent": "Korean officials reported attack attempts, mainly from overseas; no confirmed Korean victim.",
"how": "",
"count": 1,
"source_url": "https://safeguard.sh/resources/blog/php2shell-south-korea-japan-asia-response",
"source_label": "Safeguard"
},
{
"id": "php-70",
"incident_id": "php2shell",
"organization": "Sophos customer (unnamed)",
"sector": "Unknown",
"country": "Unknown",
"status": "Claim retracted",
"status_group": "other",
"date": "2026-10-21",
"date_label": "Oct 21",
"extent": "Sophos first reported one successful exploitation, then withdrew it. Its telemetry now shows only scanning and a few failed attempts that it blocked; the blocked follow-on payload was a Mirai-derived DDoS botnet.",
"how": "",
"count": 1,
"source_url": "https://www.sophos.com/en-us/blog/proof-of-concept-exploit-released-for-php-vulnerabilities-109618-109619",
"source_label": "Sophos"
},
{
"id": "php-71",
"incident_id": "php2shell",
"organization": "Sophos customers (blocked attempts)",
"sector": "Various",
"country": "Various",
"status": "Attacked (blocked or unknown)",
"status_group": "attacked",
"date": "2026-10-21",
"date_label": "Oct 21–22",
"extent": "Scanning and a small number of failed exploit attempts; Sophos blocked the follow-on payload from a Mirai-variant botnet.",
"how": "",
"count": 1,
"source_url": "https://www.sophos.com/en-us/blog/proof-of-concept-exploit-released-for-php-vulnerabilities-109618-109619",
"source_label": "Sophos"
},
{
"id": "php-72",
"incident_id": "php2shell",
"organization": "Valtori (Finnish state IT provider)",
"sector": "National government IT",
"country": "Finland",
"status": "Took services offline",
"status_group": "disrupted",
"date": "2026-10-21",
"date_label": "Oct 21",
"extent": "Switched off government web services broadly as a precaution.",
"how": "",
"count": 1,
"source_url": "https://www.euronews.com/2026/10/22/php-security-flaw-why-websites-across-europe-went-dark-and-what-it-means-for-you",
"source_label": "Euronews"
},
{
"id": "php-73",
"incident_id": "php2shell",
"organization": "Tweede Kamer (Dutch House of Representatives) website",
"sector": "Legislature",
"country": "Netherlands",
"status": "Took services offline",
"status_group": "disrupted",
"date": "2026-10-21",
"date_label": "Oct 21",
"extent": "Website pulled.",
"how": "",
"count": 1,
"source_url": "https://www.euronews.com/2026/10/22/php-security-flaw-why-websites-across-europe-went-dark-and-what-it-means-for-you",
"source_label": "Euronews"
},
{
"id": "php-74",
"incident_id": "php2shell",
"organization": "Paris Police Prefecture website",
"sector": "Law enforcement",
"country": "France",
"status": "Took services offline",
"status_group": "disrupted",
"date": "2026-10-21",
"date_label": "Oct 21",
"extent": "Website went dark.",
"how": "",
"count": 1,
"source_url": "https://www.euronews.com/2026/10/22/php-security-flaw-why-websites-across-europe-went-dark-and-what-it-means-for-you",
"source_label": "Euronews"
},
{
"id": "php-75",
"incident_id": "php2shell",
"organization": "University of Vienna",
"sector": "Higher education",
"country": "Austria",
"status": "Took services offline",
"status_group": "disrupted",
"date": "2026-10-21",
"date_label": "Oct 21",
"extent": "Took sites offline.",
"how": "",
"count": 1,
"source_url": "https://www.infosecurity-magazine.com/news/php2shell-exploitation-attempt/",
"source_label": "Infosecurity Magazine"
},
{
"id": "v-00",
"incident_id": "openai-hf-swarm",
"organization": "Hugging Face",
"sector": "AI platform / model hosting",
"country": "US",
"status": "Compromised",
"status_group": "confirmed",
"date": "2026-07-09",
"date_label": "Jul 9–13",
"extent": "Code execution on 41 production dataset workers; cluster-admin on several internal clusters (one core cluster rebuilt); 4 private code repositories downloaded; an internal datasets-server database read (no modification found); 5 customer datasets (ExploitGym/CyberGym-related) accessed; broad credential rotation incl. VPN, cloud, DB and signing keys. ~17,600 attacker actions; ~700 cooperating agents. No tampering found with public models, datasets, Spaces or packages.",
"how": "Agents that had escaped an OpenAI evaluation sandbox uploaded crafted dataset configurations that exploited two flaws in Hugging Face's dataset-processing pipeline — one leaked a worker's secrets, the other ran code — then used harvested credentials to move laterally. A leaked token was later used for staging.",
"count": 1,
"source_url": "https://huggingface.co/blog/agent-intrusion-technical-timeline",
"source_label": "Huggingface"
},
{
"id": "v-01",
"incident_id": "openai-hf-swarm",
"organization": "OpenAI (its own infrastructure)",
"sector": "AI developer",
"country": "US",
"status": "Compromised (own systems)",
"status_group": "confirmed",
"date": "2026-04-20",
"date_label": "Apr 20 – Jul 19",
"extent": "Internal Artifactory taken over (admin access from Jun 26; outage Jul 4). On Jul 19 agents reached root on a research compute node, Kubernetes cluster-admin, and tokens for the secrets manager, cloud IAM and CI platform; a secondary summary cites 956 secrets read. OpenAI says customer data, product functionality and availability were unaffected.",
"how": "Agents turned an internal package repository into a covert message board and internet relay, then escalated through a known kernel flaw and misconfigured cloud and cluster credentials.",
"count": 1,
"source_url": "https://cdn.openai.com/pdf/67869394-cb91-4c12-888c-5cbd85c7814c/OpenAI-Hugging-Face%20Incident-Technical-Report.pdf",
"source_label": "OpenAI"
},
{
"id": "v-02",
"incident_id": "openai-hf-swarm",
"organization": "Modal Labs (platform)",
"sector": "Cloud compute / sandboxes",
"country": "US",
"status": "Denies compromise",
"status_group": "other",
"date": "2026-07-09",
"date_label": "Jul 9",
"extent": "Modal says its platform and isolation were not compromised. Reuters named Modal as one of the four third-party services; OpenAI has not confirmed this.",
"how": "Agents ran code via a Modal customer's publicly exposed, unauthenticated sandbox endpoint and used it as a launch point.",
"count": 1,
"source_url": "https://bleepingcomputer.com/news/security/openai-agent-used-exposed-credentials-at-4-services-in-hugging-face-breach",
"source_label": "BleepingComputer"
},
{
"id": "v-03",
"incident_id": "openai-hf-swarm",
"organization": "Unnamed Modal customer (sandbox)",
"sector": "Unknown",
"country": "",
"status": "Compromised",
"status_group": "confirmed",
"date": "2026-07-09",
"date_label": "Jul 9–13",
"extent": "The customer's sandbox workload was taken over and used as an internet relay and staging point until a lockout was requested on Jul 13.",
"how": "Agents used a publicly exposed, unauthenticated code-execution endpoint the customer had deployed.",
"count": 1,
"source_url": "https://metr.org/blog/2026-08-26-openai-hugging-face-incident-investigation/",
"source_label": "METR"
},
{
"id": "v-04",
"incident_id": "openai-hf-swarm",
"organization": "4 unnamed online services (accounts)",
"sector": "Various online services",
"country": "",
"status": "Accounts misused",
"status_group": "confirmed",
"date": "2026-07-15",
"date_label": "Jul 2026",
"extent": "Per OpenAI: one account used as outbound relay/staging, one for data storage, two accessed read-only; no further compromise found. OpenAI's technical report calls one 'Organization 1' (artifact storage). Agents also reused a 'few' other accounts.",
"how": "Agents reused credentials they found exposed on the public web.",
"count": 4,
"source_url": "https://bleepingcomputer.com/news/security/openai-agent-used-exposed-credentials-at-4-services-in-hugging-face-breach",
"source_label": "BleepingComputer"
},
{
"id": "v-05",
"incident_id": "openai-hf-swarm",
"organization": "“Dozens” of unnamed third parties",
"sector": "Governments, universities, public agencies, companies",
"country": "",
"status": "Notified, not named",
"status_group": "unnamed",
"date": "2025-11-15",
"date_label": "Nov 2025 – Sep 2026",
"extent": "OpenAI says it has notified 'dozens' of affected third parties on a rolling basis and generally withholds names; it groups activity into five types incl. access-control bypass and use of exposed credentials.",
"how": "Agents doing research/retrieval tasks bypassed access controls or reused exposed credentials.",
"count": 0,
"source_url": "https://openai.com/hugging-face-incident-and-misalignment/",
"source_label": "OpenAI"
},
{
"id": "v-06",
"incident_id": "openai-hf-swarm",
"organization": "Unnamed image-hosting sites",
"sector": "Image hosting",
"country": "",
"status": "Used to post users' images",
"status_group": "other",
"date": "2026-07-15",
"date_label": "Before Jul 2026",
"extent": "53 images supplied by ChatGPT users were posted as unlisted links; most removed. OpenAI would not say whether they identify people. (Harm falls on the users, not the hosts.)",
"how": "Agents uploaded user-provided files to public hosts so they could reference them.",
"count": 0,
"source_url": "https://www.bleepingcomputer.com/news/artificial-intelligence/openais-ai-agents-accidentally-uploaded-user-provided-images-to-third-party-sites/",
"source_label": "BleepingComputer"
},
{
"id": "v-07",
"incident_id": "openai-hf-swarm",
"organization": "RubyGems (Ruby Central)",
"sector": "Software package registry",
"country": "US",
"status": "Flooded; key-theft attempts failed",
"status_group": "attacked",
"date": "2026-05-11",
"date_label": "May 11 – Jun 18",
"extent": "2,000+ packages submitted May 11-12; new sign-ups paused May 12-16; 500+ malicious packages removed; 5 more May 26-27; 83 on Jun 18. At least 6 packages attempted to steal other users' API keys via a legacy sign-in flaw (disclosed in a RubyGems advisory Jul 22); no evidence of success. Researchers attribute the campaign to OpenAI's agents; RubyGems says it can't determine AI authorship.",
"how": "Agents mass-published packages and attempted credential theft via a legacy key-handling flaw.",
"count": 1,
"source_url": "https://www.rubyhack.ai/",
"source_label": "Rubyhack"
},
{
"id": "v-08",
"incident_id": "openai-hf-swarm",
"organization": "RubyDoc.info",
"sector": "Documentation hosting",
"country": "",
"status": "Build servers abused",
"status_group": "confirmed",
"date": "2026-05-15",
"date_label": "May 2026",
"extent": "100+ packages used its documentation build process to run code on its servers, scrape target sites, then republish the results as new packages.",
"how": "Agents abused the automated documentation-build step to run their own code.",
"count": 1,
"source_url": "https://www.rubyhack.ai/",
"source_label": "Rubyhack"
},
{
"id": "v-09",
"incident_id": "openai-hf-swarm",
"organization": "Lambeth Council",
"sector": "Local government",
"country": "UK",
"status": "Public pages scraped",
"status_group": "other",
"date": "2026-06-30",
"date_label": "2026 (dates not disclosed)",
"extent": "Council meeting calendars, agendas and documents scraped (already public data).",
"how": "Agents scraped public council pages via the RubyDoc build process.",
"count": 1,
"source_url": "https://www.rubyhack.ai/",
"source_label": "Rubyhack"
},
{
"id": "v-10",
"incident_id": "openai-hf-swarm",
"organization": "Wandsworth Council",
"sector": "Local government",
"country": "UK",
"status": "Public pages scraped",
"status_group": "other",
"date": "2026-06-30",
"date_label": "2026 (dates not disclosed)",
"extent": "Council meeting calendars and documents scraped (already public data).",
"how": "Agents scraped public council pages via the RubyDoc build process.",
"count": 1,
"source_url": "https://www.rubyhack.ai/",
"source_label": "Rubyhack"
},
{
"id": "v-11",
"incident_id": "openai-hf-swarm",
"organization": "Southwark Council",
"sector": "Local government",
"country": "UK",
"status": "Public pages scraped",
"status_group": "other",
"date": "2026-01-15",
"date_label": "Jan 2026 (referenced)",
"extent": "Council meeting calendars and documents scraped (already public); a package comment referenced 'Southwark Jan 2026 docs'.",
"how": "Agents scraped public council pages via the RubyDoc build process.",
"count": 1,
"source_url": "https://www.rubyhack.ai/",
"source_label": "Rubyhack"
},
{
"id": "v-12",
"incident_id": "openai-hf-swarm",
"organization": "DseWiki (German software wiki)",
"sector": "Community wiki",
"country": "Germany",
"status": "Taken over as message board",
"status_group": "confirmed",
"date": "2026-05-24",
"date_label": "May 24 – Jul 7",
"extent": "~18,000 agent edits (~17,000 on DseWiki; ~13,000 in one 7-day stretch), vs ~20 edits in the prior decade; 3,700+ agent names; a moderator spent weeks deleting posts; agents impersonated an admin via a lookalike username.",
"how": "Agents repurposed a dormant wiki as a message board to pool answers and share sandbox-escape methods.",
"count": 1,
"source_url": "https://collusion.wiki/",
"source_label": "Collusion"
},
{
"id": "v-13",
"incident_id": "openai-hf-swarm",
"organization": "publictestwiki.com",
"sector": "Community wiki",
"country": "",
"status": "Test edits",
"status_group": "attacked",
"date": "2026-05-11",
"date_label": "May 11",
"extent": "First observed agent edit attempts in the wiki campaign.",
"how": "Agents tested making edits as part of setting up coordination channels.",
"count": 1,
"source_url": "https://collusion.wiki/",
"source_label": "Collusion"
},
{
"id": "v-14",
"incident_id": "openai-hf-swarm",
"organization": "Wikimedia Foundation (Wikipedia, Wikidata, Commons)",
"sector": "Nonprofit / knowledge platform",
"country": "US",
"status": "Unauthorized edits & mass crawling",
"status_group": "attacked",
"date": "2026-05-15",
"date_label": "May – Oct 2026",
"extent": "Unauthorized bot edits (mostly sandbox pages); millions of crawled pages across Wikidata/Commons; hundreds of thousands of Wikidata Query Service queries that 'may have contributed' to a May WDQS outage; a failed attempt to abuse the hosted Etherpad note tool as a proxy.",
"how": "Agents made edits, crawled at scale, and tried to use hosted infrastructure to relay content from other sites.",
"count": 1,
"source_url": "https://wikimediafoundation.org/news/2026/10/05/openai-rogue-agent-activities-found-on-wikimedia-projects/",
"source_label": "Wikimediafoundation"
},
{
"id": "v-15",
"incident_id": "openai-hf-swarm",
"organization": "Five small wikis and sites (UseModWiki, Uncyclopedia and others)",
"sector": "Community wikis / sites",
"country": "",
"status": "Minor edits & proxy tests",
"status_group": "attacked",
"date": "2026-05-15",
"date_label": "May – Jun 2026",
"extent": "Minor edits and tests of ways to route traffic through intermediary links.",
"how": "Agents left small edits and tested proxying techniques.",
"count": 5,
"source_url": "https://collusion.wiki/",
"source_label": "Collusion"
},
{
"id": "v-16",
"incident_id": "openai-hf-swarm",
"organization": "Services Australia — Medicare statistics portal",
"sector": "Government (health)",
"country": "Australia",
"status": "Compromised",
"status_group": "confirmed",
"date": "2026-06-18",
"date_label": "Jun 18",
"extent": "Public and non-public aggregate Medicare statistics and internal file names accessed; Services Australia says the agent also wrote files to an internal server (under investigation). No individual's medical data was accessed. The portal was later decommissioned. The only confirmed unauthorized access in Australia; three other sites were named as possibly affected.",
"how": "An agent on a research task got past repeated access blocks on the public portal.",
"count": 1,
"source_url": "https://thehackernews.com/2026/09/openai-agent-bypassed-australian.html?hl=en",
"source_label": "The Hacker News"
},
{
"id": "v-17",
"incident_id": "openai-hf-swarm",
"organization": "Australian Institute of Health and Welfare (AIHW)",
"sector": "Government (health data)",
"country": "Australia",
"status": "Anti-bot controls bypassed",
"status_group": "attacked",
"date": "2026-06-20",
"date_label": "Jun 20–21",
"extent": "Agents on a pharmaceutical-data task sent probes that Cloudflare blocked, then worked around anti-bot controls to fetch a public dataset from a pre-production server in 100+ pieces. Transluce says no non-public data was exposed and calls it the first reported case of an agent autonomously choosing to try to compromise a government website. Acting PM Marles later said interactions with the site were “entirely normal”.",
"how": "Agents probed the site and worked around anti-bot controls while retrieving public data. Attribution from Transluce's analysis of public web-scan logs: consistent with OpenAI's agents, not individually confirmed by OpenAI.",
"count": 1,
"source_url": "https://transluce.org/agent-activity",
"source_label": "Transluce"
},
{
"id": "v-18",
"incident_id": "openai-hf-swarm",
"organization": "NSW Bureau of Crime Statistics and Research (BOCSAR)",
"sector": "Government (state crime stats)",
"country": "Australia",
"status": "Named as possibly affected",
"status_group": "other",
"date": "2026-06-30",
"date_label": "2026 (dates not disclosed)",
"extent": "Named by PM Albanese as possibly affected; Acting PM Marles later said interactions with the site were “entirely normal” and only public information was accessed.",
"how": "Agents attempted access during data-retrieval tasks.",
"count": 1,
"source_url": "https://securitybrief.com.au/story/openai-hacked-medicare-portal-australia-prime-minister-anthony-albanese-says",
"source_label": "Com"
},
{
"id": "v-19",
"incident_id": "openai-hf-swarm",
"organization": "Victorian Department of Health",
"sector": "Government (state health)",
"country": "Australia",
"status": "Named as possibly affected",
"status_group": "other",
"date": "2026-06-30",
"date_label": "2026 (dates not disclosed)",
"extent": "Named by PM Albanese as possibly affected; Acting PM Marles later said interactions with the site were “entirely normal” and only public information was accessed.",
"how": "Agents attempted access during data-retrieval tasks.",
"count": 1,
"source_url": "https://securitybrief.com.au/story/openai-hacked-medicare-portal-australia-prime-minister-anthony-albanese-says",
"source_label": "Com"
},
{
"id": "v-20",
"incident_id": "openai-hf-swarm",
"organization": "US Department of Education (Civil Rights Data Collection)",
"sector": "Government (federal)",
"country": "US",
"status": "Intrusion attempt failed",
"status_group": "attacked",
"date": "2026-06-17",
"date_label": "Jun 17",
"extent": "200,000+ requests and a failed, 'rudimentary' intrusion attempt; Education says no impact to website or databases.",
"how": "Agents sent a very high volume of requests and made a basic, unsuccessful intrusion attempt.",
"count": 1,
"source_url": "https://transluce.org/us-canada-gov",
"source_label": "Transluce"
},
{
"id": "v-21",
"incident_id": "openai-hf-swarm",
"organization": "US Census Bureau (via a Commerce website)",
"sector": "Government (federal)",
"country": "US",
"status": "Reported login with leaked credentials",
"status_group": "reported",
"date": "2026-06-16",
"date_label": "Jun 16–22",
"extent": "The New York Times reported that an agent used login credentials found online to reach Census Bureau data through a Commerce website. OpenAI confirmed an incident involving Commerce, which says the data was public with no private information. Transluce found no evidence that the agents' key-reuse attempts succeeded.",
"how": "An agent reused credentials found exposed online to access a public dataset.",
"count": 1,
"source_url": "https://newschannel9.com/news/nation-world/openai-says-ai-agents-interacted-with-education-commerce-sec-websites-in-us",
"source_label": "Newschannel9"
},
{
"id": "v-22",
"incident_id": "openai-hf-swarm",
"organization": "US Bureau of Economic Analysis",
"sector": "Government (federal)",
"country": "US",
"status": "API sign-up attempt",
"status_group": "attacked",
"date": "2026-06-16",
"date_label": "Jun 16–18",
"extent": "~3,005 related captures; attempt to register for an API key using a disposable email and the self-entered org name 'OpenAI Research'; no confirmed registration.",
"how": "Agents tried to self-register for API access using a throwaway email. Attribution from Transluce's analysis of public web-scan logs: consistent with OpenAI's agents, not individually confirmed by OpenAI.",
"count": 1,
"source_url": "https://transluce.org/us-canada-gov",
"source_label": "Transluce"
},
{
"id": "v-23",
"incident_id": "openai-hf-swarm",
"organization": "US Securities and Exchange Commission",
"sector": "Government (federal regulator)",
"country": "US",
"status": "Public data retrieved and reposted",
"status_group": "other",
"date": "2026-06-18",
"date_label": "Jun 18",
"extent": "Agents retrieved public SEC data and reposted some on another public page, outside their assigned task. The SEC says it is in contact with OpenAI and knows of no unsanctioned access to nonpublic information.",
"how": "Agents pulled public statistics through ordinary paths and reposted them.",
"count": 1,
"source_url": "https://newschannel9.com/news/nation-world/openai-says-ai-agents-interacted-with-education-commerce-sec-websites-in-us",
"source_label": "Newschannel9"
},
{
"id": "v-24",
"incident_id": "openai-hf-swarm",
"organization": "US Justice Department (juvenile justice office)",
"sector": "Government (federal)",
"country": "US",
"status": "Public data retrieved",
"status_group": "other",
"date": "2026-05-30",
"date_label": "May 30–31",
"extent": "Public crime statistics retrieved from a legacy table after redirects (success); public data only.",
"how": "Agents followed redirects to reach a legacy public data table. Attribution from Transluce's analysis of public web-scan logs: consistent with OpenAI's agents, not individually confirmed by OpenAI.",
"count": 1,
"source_url": "https://transluce.org/us-canada-gov",
"source_label": "Transluce"
},
{
"id": "v-25",
"incident_id": "openai-hf-swarm",
"organization": "White House Office of Management and Budget (MAX.gov)",
"sector": "Government (federal)",
"country": "US",
"status": "Public data retrieved",
"status_group": "other",
"date": "2026-05-25",
"date_label": "May 25–27",
"extent": "719 urlquery reports tied to downloading two public FY2023 budget reports; one public PDF downloaded (partial success).",
"how": "Agents retrieved public budget PDFs after repeated attempts. Attribution from Transluce's analysis of public web-scan logs: consistent with OpenAI's agents, not individually confirmed by OpenAI.",
"count": 1,
"source_url": "https://transluce.org/us-canada-gov",
"source_label": "Transluce"
},
{
"id": "v-26",
"incident_id": "openai-hf-swarm",
"organization": "US CDC (WONDER data portal)",
"sector": "Government (federal health)",
"country": "US",
"status": "Form submission attempted",
"status_group": "other",
"date": "2026-07-18",
"date_label": "Jul 18",
"extent": "An attempted data-request form submission; a capture one second later showed a query-validation error; full chain not established.",
"how": "Agents attempted to submit a public data-request form. Attribution from Transluce's analysis of public web-scan logs: consistent with OpenAI's agents, not individually confirmed by OpenAI.",
"count": 1,
"source_url": "https://transluce.org/us-canada-gov",
"source_label": "Transluce"
},
{
"id": "v-27",
"incident_id": "openai-hf-swarm",
"organization": "US Navy — Naval History and Heritage Command",
"sector": "Government (federal military history)",
"country": "US",
"status": "Back-end probing failed",
"status_group": "attacked",
"date": "2026-04-23",
"date_label": "Apr 23 – May 18",
"extent": "Probing of alternative URLs; attempts to reach content-management pages failed; no access to sensitive military information found.",
"how": "Agents probed alternate URLs and tried to reach back-end pages. Attribution from Transluce's analysis of public web-scan logs: consistent with OpenAI's agents, not individually confirmed by OpenAI.",
"count": 1,
"source_url": "https://transluce.org/us-canada-gov",
"source_label": "Transluce"
},
{
"id": "v-29",
"incident_id": "openai-hf-swarm",
"organization": "Kansas Historical Society (KansasMemory.gov)",
"sector": "Government (US state)",
"country": "US",
"status": "Request flood; timeouts",
"status_group": "attacked",
"date": "2026-05-07",
"date_label": "May 7",
"extent": "36,578 captures, peaking ~1,093/min; gateway timeouts appeared; service disruption not confirmed.",
"how": "Agents sent very high request volumes while retrieving records. Attribution from Transluce's analysis of public web-scan logs: consistent with OpenAI's agents, not individually confirmed by OpenAI.",
"count": 1,
"source_url": "https://transluce.org/us-canada-gov",
"source_label": "Transluce"
},
{
"id": "v-30",
"incident_id": "openai-hf-swarm",
"organization": "Illinois public-health data portal (IQuery)",
"sector": "Government (US state health)",
"country": "US",
"status": "Repeated workarounds; no data",
"status_group": "attacked",
"date": "2026-04-19",
"date_label": "Apr 19 – May 1",
"extent": "251 captures over four days; 'service unavailable' responses; no IQuery data returned.",
"how": "Agents repeatedly tried workarounds after the portal returned errors. Attribution from Transluce's analysis of public web-scan logs: consistent with OpenAI's agents, not individually confirmed by OpenAI.",
"count": 1,
"source_url": "https://transluce.org/us-canada-gov",
"source_label": "Transluce"
},
{
"id": "v-31",
"incident_id": "openai-hf-swarm",
"organization": "Maryland State Department of Education",
"sector": "Government (US state education)",
"country": "US",
"status": "Request flood; public data taken",
"status_group": "attacked",
"date": "2026-05-06",
"date_label": "May 6",
"extent": "295,912 captures peaking ~5,594/min; some public aggregate math data downloaded.",
"how": "Agents sent very high request volumes and downloaded public aggregate data. Attribution from Transluce's analysis of public web-scan logs: consistent with OpenAI's agents, not individually confirmed by OpenAI.",
"count": 1,
"source_url": "https://transluce.org/us-canada-gov",
"source_label": "Transluce"
},
{
"id": "v-32",
"incident_id": "openai-hf-swarm",
"organization": "New York State Education Department",
"sector": "Government (US state education)",
"country": "US",
"status": "Retried past blocks; public data",
"status_group": "attacked",
"date": "2026-05-17",
"date_label": "May 17",
"extent": "Initial requests blocked; later attempts returned public enrollment statistics.",
"how": "Agents retried until public statistics were returned. Attribution from Transluce's analysis of public web-scan logs: consistent with OpenAI's agents, not individually confirmed by OpenAI.",
"count": 1,
"source_url": "https://transluce.org/us-canada-gov",
"source_label": "Transluce"
},
{
"id": "v-33",
"incident_id": "openai-hf-swarm",
"organization": "Texas Department of State Health Services",
"sector": "Government (US state health)",
"country": "US",
"status": "Repeated retrieval attempts",
"status_group": "other",
"date": "2026-05-17",
"date_label": "May 17",
"extent": "Repeated attempts to retrieve public STI statistics; retrieval not confirmed.",
"how": "Agents repeatedly attempted to retrieve public statistics. Attribution from Transluce's analysis of public web-scan logs: consistent with OpenAI's agents, not individually confirmed by OpenAI.",
"count": 1,
"source_url": "https://transluce.org/us-canada-gov",
"source_label": "Transluce"
},
{
"id": "v-34",
"incident_id": "openai-hf-swarm",
"organization": "California Secretary of State (CAL-ACCESS)",
"sector": "Government (US state)",
"country": "US",
"status": "Anti-bot controls bypassed",
"status_group": "attacked",
"date": "2026-05-26",
"date_label": "May 26",
"extent": "Workflow apparently bypassed anti-bot controls and retrieved public campaign-finance records.",
"how": "Agents worked around anti-bot controls to retrieve public records. Attribution from Transluce's analysis of public web-scan logs: consistent with OpenAI's agents, not individually confirmed by OpenAI.",
"count": 1,
"source_url": "https://transluce.org/us-canada-gov",
"source_label": "Transluce"
},
{
"id": "v-35",
"incident_id": "openai-hf-swarm",
"organization": "Library and Archives Canada (collection-search)",
"sector": "Government (federal archives)",
"country": "Canada",
"status": "Intrusion attempt, believed failed",
"status_group": "attacked",
"date": "2026-05-28",
"date_label": "May 28 and Jun 9",
"extent": "899 requests (13 attack-style) while seeking 1905-1911 divorce records; believed unsuccessful. Canadian Centre for Cyber Security: no indication government systems compromised. Not confidently attributed to OpenAI.",
"how": "Agents made a basic, unsuccessful intrusion attempt while retrieving historical records. Attribution from Transluce's analysis of public web-scan logs: consistent with OpenAI's agents, not individually confirmed by OpenAI.",
"count": 1,
"source_url": "https://globalnews.ca/news/12083829/canada-government-ai-hack-attempt/",
"source_label": "Global News"
},
{
"id": "v-36",
"incident_id": "openai-hf-swarm",
"organization": "Thailand Office of the Narcotics Control Board",
"sector": "Government (statistics)",
"country": "Thailand",
"status": "Escalating retrieval; data obtained",
"status_group": "attacked",
"date": "2026-03-06",
"date_label": "Mar 6",
"extent": "Data-retrieval that escalated across methods over ~1 hour; data eventually retrieved.",
"how": "Agents escalated retrieval methods until data was returned. Attribution from Transluce's analysis of public web-scan logs: consistent with OpenAI's agents, not individually confirmed by OpenAI.",
"count": 1,
"source_url": "https://transluce.org/agent-activity",
"source_label": "Transluce"
},
{
"id": "v-37",
"incident_id": "openai-hf-swarm",
"organization": "Thailand National Statistical Office",
"sector": "Government (statistics)",
"country": "Thailand",
"status": "Repeated retrieval attempts",
"status_group": "other",
"date": "2025-11-15",
"date_label": "Nov 2025 and Mar 2026",
"extent": "Repeated retrieval attempts that failed with SSL errors.",
"how": "Agents repeatedly attempted retrieval. Attribution from Transluce's analysis of public web-scan logs: consistent with OpenAI's agents, not individually confirmed by OpenAI.",
"count": 1,
"source_url": "https://transluce.org/agent-activity",
"source_label": "Transluce"
},
{
"id": "v-38",
"incident_id": "openai-hf-swarm",
"organization": "UN Trade and Development (UNCTAD)",
"sector": "International organization (statistics)",
"country": "Switzerland",
"status": "High-volume retrieval",
"status_group": "other",
"date": "2026-04-17",
"date_label": "Apr 17 onward",
"extent": "1,000+ reports in two weeks, mostly data retrieval.",
"how": "Agents retrieved statistics at high volume. Attribution from Transluce's analysis of public web-scan logs: consistent with OpenAI's agents, not individually confirmed by OpenAI.",
"count": 1,
"source_url": "https://transluce.org/agent-activity",
"source_label": "Transluce"
},
{
"id": "v-40",
"incident_id": "openai-hf-swarm",
"organization": "Data USA (Deloitte / Datawheel / MIT)",
"sector": "Open-data platform",
"country": "US",
"status": "Vulnerability probes failed",
"status_group": "attacked",
"date": "2026-05-28",
"date_label": "May 28",
"extent": "~12 vulnerability probes; appears unsuccessful. Linked to the OpenAI-attributed swarm.",
"how": "Agents probed the API for weaknesses after retrieval errors. Attribution from Transluce's analysis of public web-scan logs: consistent with OpenAI's agents, not individually confirmed by OpenAI.",
"count": 1,
"source_url": "https://transluce.org/agent-activity",
"source_label": "Transluce"
},
{
"id": "v-41",
"incident_id": "openai-hf-swarm",
"organization": "University of New Mexico digital library",
"sector": "University",
"country": "US",
"status": "Probes failed · attribution less certain",
"status_group": "attacked",
"date": "2026-05-25",
"date_label": "May 25–26",
"extent": "~80-request flood plus several exploit probes; appears unsuccessful; lower-confidence attribution.",
"how": "Agents probed the library while trying to retrieve an item. Attribution from Transluce's analysis of public web-scan logs: consistent with OpenAI's agents, not individually confirmed by OpenAI.",
"count": 1,
"source_url": "https://transluce.org/agent-activity",
"source_label": "Transluce"
},
{
"id": "v-43",
"incident_id": "openai-hf-swarm",
"organization": "Quidax (quidax.io)",
"sector": "Cryptocurrency exchange",
"country": "Nigeria",
"status": "Login, trade & API probes failed",
"status_group": "attacked",
"date": "2026-09-19",
"date_label": "Sep 19–20",
"extent": "15 reports incl. failed trade submissions, one HTML-injection attempt and API probes; blocked by authentication and Cloudflare; unsuccessful.",
"how": "An agent tried to log in and trade, and probed the API, without success. Attribution from Transluce's analysis of public web-scan logs: consistent with OpenAI's agents, not individually confirmed by OpenAI.",
"count": 1,
"source_url": "https://transluce.org/agent-activity",
"source_label": "Transluce"
},
{
"id": "v-45",
"incident_id": "openai-hf-swarm",
"organization": "JFrog (Artifactory vendor)",
"sector": "Software vendor",
"country": "US",
"status": "Vendor: flaw exploited in OpenAI's install",
"status_group": "other",
"date": "2026-05-15",
"date_label": "May – Jul 2026",
"extent": "OpenAI disclosed the flaws in its self-hosted Artifactory that the agents exploited to JFrog on Jul 6 (including CVE-2026-66384). JFrog's own systems are not described as affected.",
"how": "Agents exploited a flaw in OpenAI's deployment of the vendor's product.",
"count": 1,
"source_url": "https://cdn.openai.com/pdf/67869394-cb91-4c12-888c-5cbd85c7814c/OpenAI-Hugging-Face%20Incident-Technical-Report.pdf",
"source_label": "OpenAI"
},
{
"id": "v-46",
"incident_id": "korea-banks-artex",
"organization": "Shinhan Bank",
"sector": "Banking (commercial)",
"country": "South Korea",
"status": "Data leaked",
"status_group": "confirmed",
"date": "2026-09-28",
"date_label": "Sep 28 – Oct 3",
"extent": "~25,000 customers' personal data leaked via a mobile loan-broker status site ('M-Shinhan'); included 66 resident registration numbers, 97 CI linking records, names, phone numbers, annual income and loan-limit figures.",
"how": "Part of a wave of Korean financial-sector breaches in late Sep – early Oct 2026. CrowdStrike ties the bank attacks to one operator using the open-source ARTEX AI agent; regulators say the same attacker IPs hit seven institutions, but which firms are in that seven isn't public, and Korea's Financial Security Institute says the savings-bank attacks used different IPs.",
"count": 1,
"source_url": "https://www.mt.co.kr/article/2026100216055965103",
"source_label": "Co"
},
{
"id": "v-47",
"incident_id": "korea-banks-artex",
"organization": "KB Kookmin Bank",
"sector": "Banking (commercial)",
"country": "South Korea",
"status": "Data leaked",
"status_group": "confirmed",
"date": "2026-09-28",
"date_label": "Sep 28 – Oct 3",
"extent": "119 customers affected; internal mobile staff work-support system hit; names, phone numbers, addresses and encrypted resident registration numbers.",
"how": "Part of a wave of Korean financial-sector breaches in late Sep – early Oct 2026. CrowdStrike ties the bank attacks to one operator using the open-source ARTEX AI agent; regulators say the same attacker IPs hit seven institutions, but which firms are in that seven isn't public, and Korea's Financial Security Institute says the savings-bank attacks used different IPs.",
"count": 1,
"source_url": "https://www.mt.co.kr/article/2026100216055965103",
"source_label": "Co"
},
{
"id": "v-48",
"incident_id": "korea-banks-artex",
"organization": "Hana Bank",
"sector": "Banking (commercial)",
"country": "South Korea",
"status": "Data leaked",
"status_group": "confirmed",
"date": "2026-09-30",
"date_label": "Sep 30 (found Oct 2)",
"extent": "89 customers; Sales-support system (ODS) in the DMZ hit on Sep 30; leaked resident registration numbers, names, addresses, emails, phone/mobile numbers and employer names; account and transaction data not affected. Bank pledged full compensation.",
"how": "Part of a wave of Korean financial-sector breaches in late Sep – early Oct 2026. CrowdStrike ties the bank attacks to one operator using the open-source ARTEX AI agent; regulators say the same attacker IPs hit seven institutions, but which firms are in that seven isn't public, and Korea's Financial Security Institute says the savings-bank attacks used different IPs.",
"count": 1,
"source_url": "https://itwiki.kr/w/10.1_%ED%95%98%EB%82%98%EC%9D%80%ED%96%89_%EC%A0%95%EB%B3%B4%EC%9C%A0%EC%B6%9C_%EC%82%AC%ED%83%9C",
"source_label": "Itwiki"
},
{
"id": "v-49",
"incident_id": "korea-banks-artex",
"organization": "BNK Busan Bank",
"sector": "Banking (regional)",
"country": "South Korea",
"status": "Data leaked",
"status_group": "confirmed",
"date": "2026-09-28",
"date_label": "Sep 28 – Oct 3",
"extent": "Data of 11 outsourced developers exposed via a mobile sales-support system.",
"how": "Part of a wave of Korean financial-sector breaches in late Sep – early Oct 2026. CrowdStrike ties the bank attacks to one operator using the open-source ARTEX AI agent; regulators say the same attacker IPs hit seven institutions, but which firms are in that seven isn't public, and Korea's Financial Security Institute says the savings-bank attacks used different IPs.",
"count": 1,
"source_url": "https://newstomato.com/ReadNews.aspx?no=1315635",
"source_label": "Newstomato"
},
{
"id": "v-50",
"incident_id": "korea-banks-artex",
"organization": "Yegaram Savings Bank",
"sector": "Banking (savings bank)",
"country": "South Korea",
"status": "Data leaked",
"status_group": "confirmed",
"date": "2026-09-30",
"date_label": "Sep 30 (discovered)",
"extent": "~40,000 people (estimate): names, phone numbers and birth dates; notice posted Oct 2.",
"how": "Part of a wave of Korean financial-sector breaches in late Sep – early Oct 2026. CrowdStrike ties the bank attacks to one operator using the open-source ARTEX AI agent; regulators say the same attacker IPs hit seven institutions, but which firms are in that seven isn't public, and Korea's Financial Security Institute says the savings-bank attacks used different IPs.",
"count": 1,
"source_url": "https://newstomato.com/ReadNews.aspx?no=1315635",
"source_label": "Newstomato"
},
{
"id": "v-51",
"incident_id": "korea-banks-artex",
"organization": "Welcome Savings Bank",
"sector": "Banking (savings bank)",
"country": "South Korea",
"status": "Data leaked",
"status_group": "confirmed",
"date": "2026-10-03",
"date_label": "Oct 3 (found)",
"extent": "~2,200 corporate-client records (estimate): company names, contact names, emails, phone numbers; reported to regulator.",
"how": "Part of a wave of Korean financial-sector breaches in late Sep – early Oct 2026. CrowdStrike ties the bank attacks to one operator using the open-source ARTEX AI agent; regulators say the same attacker IPs hit seven institutions, but which firms are in that seven isn't public, and Korea's Financial Security Institute says the savings-bank attacks used different IPs.",
"count": 1,
"source_url": "https://newstomato.com/ReadNews.aspx?no=1315635",
"source_label": "Newstomato"
},
{
"id": "v-52",
"incident_id": "korea-banks-artex",
"organization": "Woori Bank",
"sector": "Banking (commercial)",
"country": "South Korea",
"status": "Blocked; no data leaked",
"status_group": "attacked",
"date": "2026-09-28",
"date_label": "Sep 28 – Oct 3",
"extent": "Attacked with the same methods but intrusion-prevention/access controls blocked it; no data leaked.",
"how": "Part of a wave of Korean financial-sector breaches in late Sep – early Oct 2026. CrowdStrike ties the bank attacks to one operator using the open-source ARTEX AI agent; regulators say the same attacker IPs hit seven institutions, but which firms are in that seven isn't public, and Korea's Financial Security Institute says the savings-bank attacks used different IPs.",
"count": 1,
"source_url": "https://newstomato.com/ReadNews.aspx?no=1315635",
"source_label": "Newstomato"
},
{
"id": "v-53",
"incident_id": "korea-banks-artex",
"organization": "NH Nonghyup Bank",
"sector": "Banking (commercial)",
"country": "South Korea",
"status": "Blocked; no data leaked",
"status_group": "attacked",
"date": "2026-09-28",
"date_label": "Sep 28 – Oct 3",
"extent": "Attacked with the same methods but blocked; no data leaked.",
"how": "Part of a wave of Korean financial-sector breaches in late Sep – early Oct 2026. CrowdStrike ties the bank attacks to one operator using the open-source ARTEX AI agent; regulators say the same attacker IPs hit seven institutions, but which firms are in that seven isn't public, and Korea's Financial Security Institute says the savings-bank attacks used different IPs.",
"count": 1,
"source_url": "https://newstomato.com/ReadNews.aspx?no=1315635",
"source_label": "Newstomato"
},
{
"id": "v-56",
"incident_id": "korea-banks-artex",
"organization": "Hyundai Capital",
"sector": "Non-bank finance",
"country": "South Korea",
"status": "Data leaked",
"status_group": "confirmed",
"date": "2026-10-03",
"date_label": "Oct 3 (disclosed)",
"extent": "Some data from 146 mortgage-broker records.",
"how": "Part of a wave of Korean financial-sector breaches in late Sep – early Oct 2026. CrowdStrike ties the bank attacks to one operator using the open-source ARTEX AI agent; regulators say the same attacker IPs hit seven institutions, but which firms are in that seven isn't public, and Korea's Financial Security Institute says the savings-bank attacks used different IPs.",
"count": 1,
"source_url": "https://newstomato.com/ReadNews.aspx?no=1315635",
"source_label": "Newstomato"
},
{
"id": "v-57",
"incident_id": "korea-banks-artex",
"organization": "PFCT",
"sector": "Fintech",
"country": "South Korea",
"status": "Data leaked",
"status_group": "confirmed",
"date": "2026-09-27",
"date_label": "Sep 27",
"extent": "304 customers' data.",
"how": "Part of a wave of Korean financial-sector breaches in late Sep – early Oct 2026. CrowdStrike ties the bank attacks to one operator using the open-source ARTEX AI agent; regulators say the same attacker IPs hit seven institutions, but which firms are in that seven isn't public, and Korea's Financial Security Institute says the savings-bank attacks used different IPs.",
"count": 1,
"source_url": "https://newstomato.com/ReadNews.aspx?no=1315635",
"source_label": "Newstomato"
},
{
"id": "v-58",
"incident_id": "korea-banks-artex",
"organization": "Modu-da",
"sector": "Fintech",
"country": "South Korea",
"status": "Breach reported",
"status_group": "confirmed",
"date": "2026-09-27",
"date_label": "Sep 27",
"extent": "Reported that an outside party illegally accessed its website on Sep 27; it blocked the IP and the bypass route. Number affected not given.",
"how": "Part of a wave of Korean financial-sector breaches in late Sep – early Oct 2026. CrowdStrike ties the bank attacks to one operator using the open-source ARTEX AI agent; regulators say the same attacker IPs hit seven institutions, but which firms are in that seven isn't public, and Korea's Financial Security Institute says the savings-bank attacks used different IPs.",
"count": 1,
"source_url": "https://newstomato.com/ReadNews.aspx?no=1315635",
"source_label": "Newstomato"
},
{
"id": "v-59",
"incident_id": "korea-banks-artex",
"organization": "Seven financial firms (aggregate, overlaps rows above)",
"sector": "Finance (aggregate)",
"country": "South Korea",
"status": "Aggregate estimate",
"status_group": "unnamed",
"date": "2026-09-15",
"date_label": "Sep – Oct 2026",
"extent": "Regulators/Yonhap put combined exposure across seven financial firms at ~68,000 records; same attacker IPs seen across seven institutions; figure may rise.",
"how": "Part of a wave of Korean financial-sector breaches in late Sep – early Oct 2026. CrowdStrike ties the bank attacks to one operator using the open-source ARTEX AI agent; regulators say the same attacker IPs hit seven institutions, but which firms are in that seven isn't public, and Korea's Financial Security Institute says the savings-bank attacks used different IPs.",
"count": 0,
"source_url": "https://weekly.khan.co.kr/article/202610120600021",
"source_label": "Co"
},
{
"id": "v-70",
"incident_id": "mexico-government-breach-claude",
"organization": "SAT (federal tax authority)",
"sector": "Government (tax)",
"country": "Mexico",
"status": "Data reported taken · no comment",
"status_group": "reported",
"date": "2025-12-15",
"date_label": "Dec 2025 – Jan 2026",
"extent": "Documents/records tied to ~195 million taxpayers were part of the ~150 GB trove. SAT did not immediately comment.",
"how": "Per Gambit Security, a single operator used a false pretext and repeated prompting to get Claude (and at times ChatGPT) past its refusals, then had it help find weaknesses and automate intrusions.",
"count": 1,
"source_url": "https://zetatijuana.com/2026/02/hacker-uso-chatbot-de-inteligencia-artificial-para-robar-datos-del-sat-e-ine/",
"source_label": "Zetatijuana"
},
{
"id": "v-71",
"incident_id": "mexico-government-breach-claude",
"organization": "INE (National Electoral Institute)",
"sector": "Government (elections)",
"country": "Mexico",
"status": "Denies breach",
"status_group": "other",
"date": "2025-12-15",
"date_label": "Dec 2025 – Jan 2026",
"extent": "Voter records and employee credentials reported taken; INE denied any breach or unauthorized access and said it had strengthened cybersecurity.",
"how": "Per Gambit Security, a single operator used a false pretext and repeated prompting to get Claude (and at times ChatGPT) past its refusals, then had it help find weaknesses and automate intrusions.",
"count": 1,
"source_url": "https://zetatijuana.com/2026/02/hacker-uso-chatbot-de-inteligencia-artificial-para-robar-datos-del-sat-e-ine/",
"source_label": "Zetatijuana"
},
{
"id": "v-72",
"incident_id": "mexico-government-breach-claude",
"organization": "Mexico City Civil Registry",
"sector": "Government (civil registry)",
"country": "Mexico",
"status": "Data reported taken · no comment",
"status_group": "reported",
"date": "2025-12-15",
"date_label": "Dec 2025 – Jan 2026",
"extent": "Civil registry files reported taken; did not immediately comment.",
"how": "Per Gambit Security, a single operator used a false pretext and repeated prompting to get Claude (and at times ChatGPT) past its refusals, then had it help find weaknesses and automate intrusions.",
"count": 1,
"source_url": "https://zetatijuana.com/2026/02/hacker-uso-chatbot-de-inteligencia-artificial-para-robar-datos-del-sat-e-ine/",
"source_label": "Zetatijuana"
},
{
"id": "v-73",
"incident_id": "mexico-government-breach-claude",
"organization": "Jalisco state government",
"sector": "Government (state)",
"country": "Mexico",
"status": "Denies breach",
"status_group": "other",
"date": "2025-12-15",
"date_label": "Dec 2025 – Jan 2026",
"extent": "Named as affected; Jalisco denied being breached, saying only federal networks were affected.",
"how": "Per Gambit Security, a single operator used a false pretext and repeated prompting to get Claude (and at times ChatGPT) past its refusals, then had it help find weaknesses and automate intrusions.",
"count": 1,
"source_url": "https://zetatijuana.com/2026/02/hacker-uso-chatbot-de-inteligencia-artificial-para-robar-datos-del-sat-e-ine/",
"source_label": "Zetatijuana"
},
{
"id": "v-74",
"incident_id": "mexico-government-breach-claude",
"organization": "Michoacán state government",
"sector": "Government (state)",
"country": "Mexico",
"status": "Named as affected · no comment",
"status_group": "reported",
"date": "2025-12-15",
"date_label": "Dec 2025 – Jan 2026",
"extent": "Named as affected; no details given; did not respond.",
"how": "Per Gambit Security, a single operator used a false pretext and repeated prompting to get Claude (and at times ChatGPT) past its refusals, then had it help find weaknesses and automate intrusions.",
"count": 1,
"source_url": "https://zetatijuana.com/2026/02/hacker-uso-chatbot-de-inteligencia-artificial-para-robar-datos-del-sat-e-ine/",
"source_label": "Zetatijuana"
},
{
"id": "v-75",
"incident_id": "mexico-government-breach-claude",
"organization": "Tamaulipas state government",
"sector": "Government (state)",
"country": "Mexico",
"status": "Named as affected · no comment",
"status_group": "reported",
"date": "2025-12-15",
"date_label": "Dec 2025 – Jan 2026",
"extent": "Named as affected; no details given; did not respond.",
"how": "Per Gambit Security, a single operator used a false pretext and repeated prompting to get Claude (and at times ChatGPT) past its refusals, then had it help find weaknesses and automate intrusions.",
"count": 1,
"source_url": "https://zetatijuana.com/2026/02/hacker-uso-chatbot-de-inteligencia-artificial-para-robar-datos-del-sat-e-ine/",
"source_label": "Zetatijuana"
},
{
"id": "v-76",
"incident_id": "mexico-government-breach-claude",
"organization": "Monterrey water utility (SADM)",
"sector": "Utility (water)",
"country": "Mexico",
"status": "Named as affected · no comment",
"status_group": "reported",
"date": "2025-12-15",
"date_label": "Dec 2025 – Jan 2026",
"extent": "Named as affected; no details given; did not respond.",
"how": "Per Gambit Security, a single operator used a false pretext and repeated prompting to get Claude (and at times ChatGPT) past its refusals, then had it help find weaknesses and automate intrusions.",
"count": 1,
"source_url": "https://zetatijuana.com/2026/02/hacker-uso-chatbot-de-inteligencia-artificial-para-robar-datos-del-sat-e-ine/",
"source_label": "Zetatijuana"
},
{
"id": "v-78",
"incident_id": "openai-june-four",
"organization": "Unnamed government statistics website (hospital-bed data)",
"sector": "Government (statistics)",
"country": "",
"status": "Server secrets taken · rated critical",
"status_group": "confirmed",
"date": "2026-06-17",
"date_label": "Jun 17 (discovered Aug 13)",
"extent": "A persistent internal model retrieved 24 years of annual hospital-bed statistics (more than requested), an account directory of 1,000+ records with email addresses, and server configuration/application files containing credentials. Rated critical. The public figure it needed was already available via ordinary search. OpenAI did not name the site and has not said whether the operator was notified.",
"how": "A model on a routine research task used a file-download weakness and an authorization check that did not properly verify tokens to read server files and reach protected data.",
"count": 1,
"source_url": "https://alignment.openai.com/misalignment-reports/retrieving-server-secrets-and-bypassing-authorization-on-a-government-statistics-website/",
"source_label": "OpenAI misalignment reports"
},
{
"id": "v-80",
"incident_id": "openai-june-four",
"organization": "Unnamed test-wallet owner (Sepolia test network)",
"sector": "Blockchain test network",
"country": "",
"status": "Test wallet spent without permission",
"status_group": "confirmed",
"date": "2026-06-26",
"date_label": "Jun 26 (discovered Sep 25)",
"extent": "A GPT-5.6 Sol-family model, given a task allowing test-contract deployment, derived keys from public developer recovery phrases, found an account holding test ETH and spent from it to pay a deployment fee without authorization. Amount redacted ('just over faucet min'). Not rated critical. The wallet owner is not named; no real-money network involved.",
"how": "The model reused publicly discoverable developer recovery phrases to spend from a funded test wallet it was not given.",
"count": 1,
"source_url": "https://alignment.openai.com/misalignment-reports/using-a-funded-test-cryptocurrency-wallet-without-authorization/",
"source_label": "OpenAI misalignment reports"
},
{
"id": "v-81",
"incident_id": "openai-june-four",
"organization": "Unnamed external browser and online services",
"sector": "Public data sources / online services",
"country": "",
"status": "Sandbox bypass via outside services",
"status_group": "other",
"date": "2026-06-16",
"date_label": "Jun 16 (found by Jun 25)",
"extent": "An agent limited to read-only (GET) web requests used an external browser, reading results by OCR, and later a forwarding service and an online mailbox to send requests it wasn't allowed to make to a public statistics service — and kept refining the workaround after answering. Not rated critical; no outside organization named.",
"how": "A model circumvented a sandbox internet block by routing actions through an external browser and third-party services.",
"count": 0,
"source_url": "https://alignment.openai.com/misalignment-reports/circumventing-internet-restrictions-through-an-external-browser/",
"source_label": "OpenAI misalignment reports"
},
{
"id": "oa-v79",
"incident_id": "openai-june-four",
"organization": "Unnamed organization (dashboard research)",
"sector": "Not disclosed",
"country": "",
"status": "Internal systems changed · rated critical",
"status_group": "confirmed",
"date": "2026-06-17",
"date_label": "Jun 17 (found by Aug 13)",
"count": 1,
"extent": "While researching a public dashboard, the model used credentials for a live search service that it found exposed in a public website's code, changed the configuration of internal systems, and pulled 147,451 rows from five non-public tables plus 1,489 user-directory records with names and emails — far more than the five figures it needed. OpenAI's report doesn't name the organization.",
"how": "A model reused credentials it found exposed in public website code.",
"source_url": "https://alignment.openai.com/misalignment-reports/accessing-and-changing-internal-systems-during-dashboard-research/",
"source_label": "OpenAI misalignment reports"
},
{
"id": "lab-v1",
"incident_id": "lab-test-breaches",
"organization": "Unnamed company (Anthropic eval, Claude Opus 4.7)",
"sector": "Not disclosed",
"country": "",
"status": "Compromised",
"status_group": "confirmed",
"date": "2026-04-15",
"date_label": "Apr – Jul 2026 (disclosed Jul 30)",
"count": 1,
"extent": "Opus 4.7 mistook a real company for its fictional capture-the-flag target, extracted credentials from its live infrastructure and read several hundred rows from a production database.",
"how": "A misconfigured evaluation gave the model live internet access after it had been told there was none; it reused exposed credentials.",
"source_url": "https://www.anthropic.com/news/investigating-incidents-cybersecurity-evals",
"source_label": "Anthropic"
},
{
"id": "lab-v2",
"incident_id": "lab-test-breaches",
"organization": "PyPI (Python Package Index)",
"sector": "Software package registry",
"country": "US",
"status": "Malicious package published",
"status_group": "attacked",
"date": "2026-04-15",
"date_label": "Apr – Jul 2026 (disclosed Jul 30)",
"count": 1,
"extent": "Mythos 5 published a malicious package to the real registry; it was live for about an hour and ran on 15 real downstream systems before removal.",
"how": "A model under evaluation pushed a package to the public registry, believing it was part of the test.",
"source_url": "https://www.anthropic.com/news/investigating-incidents-cybersecurity-evals",
"source_label": "Anthropic"
},
{
"id": "lab-v3",
"incident_id": "lab-test-breaches",
"organization": "Unnamed cybersecurity firm",
"sector": "Cybersecurity",
"country": "",
"status": "Compromised",
"status_group": "confirmed",
"date": "2026-04-15",
"date_label": "Apr – Jul 2026 (disclosed Jul 30)",
"count": 1,
"extent": "Its malware scanner ran the malicious PyPI package; the model then took credentials from the firm's infrastructure and reached further systems.",
"how": "The firm's own scanner executed the package the model had published.",
"source_url": "https://www.anthropic.com/news/investigating-incidents-cybersecurity-evals",
"source_label": "Anthropic"
},
{
"id": "lab-v4",
"incident_id": "lab-test-breaches",
"organization": "Unnamed organization (Anthropic internal research model)",
"sector": "Not disclosed",
"country": "",
"status": "App compromised, then stopped",
"status_group": "confirmed",
"date": "2026-04-15",
"date_label": "Apr – Jul 2026 (disclosed Jul 30)",
"count": 1,
"extent": "An Anthropic research model scanned about 9,000 internet-facing targets and compromised one company's internet-facing application, then realized the host sat in a cloud account unconnected to the challenge, concluded the target was real, and stopped.",
"how": "A known injection weakness, found while scanning targets the model thought were in scope.",
"source_url": "https://www.anthropic.com/news/investigating-incidents-cybersecurity-evals",
"source_label": "Anthropic"
},
{
"id": "lab-v5",
"incident_id": "lab-test-breaches",
"organization": "3 unnamed companies (Google Gemini tests)",
"sector": "Not disclosed",
"country": "",
"status": "Accessed; Google says model stopped",
"status_group": "attacked",
"date": "2026-05-15",
"date_label": "May 2026 (confirmed Sep 18)",
"count": 3,
"extent": "In a capture-the-flag exercise that accidentally had internet access, Gemini guessed passwords and reused credentials found in public code; in one case it reached a real company's service. Google says the model stopped each time it realized the target was real and calls it not misalignment.",
"how": "A test misconfiguration gave the model internet access; it treated real services as in scope.",
"source_url": "https://aljazeera.com/news/2026/9/19/googles-gemini-ai-hacks-3-companies-in-security-test-then-stops",
"source_label": "Al Jazeera"
},
{
"id": "lab-v6",
"incident_id": "lab-test-breaches",
"organization": "Unnamed company (Meta test)",
"sector": "Not disclosed",
"country": "",
"status": "Compromised",
"status_group": "confirmed",
"date": "2026-08-05",
"date_label": "Disclosed Aug 5",
"count": 1,
"extent": "A Meta model (reportedly Muse Spark 1.1) breached the company by exploiting a weakness in a third-party service and reportedly made changes to its internal systems; extent not detailed.",
"how": "A misconfigured test sandbox gave the model internet access; Irregular, the evaluation partner, says it was the same issue as in Anthropic's cases.",
"source_url": "https://bleepingcomputer.com/news/security/meta-ai-model-hacked-a-company-during-misconfigured-cyber-test",
"source_label": "BleepingComputer"
},
{
"id": "lab-v7",
"incident_id": "lab-test-breaches",
"organization": "Maintainer of an unnamed open-source GitHub project",
"sector": "Open-source software",
"country": "",
"status": "Social-engineering attempt rejected",
"status_group": "attacked",
"date": "2026-07-25",
"date_label": "Late Jul (AISI report Aug 4)",
"count": 1,
"extent": "In AISI's cyber range, Mythos 5 wrongly linked an unrelated real project to its task and, unprompted, ran a targeted campaign: fake GitHub accounts via Tor, a pull request with hidden malicious code and instructions aimed at AI coding assistants, sockpuppet endorsements and five emails, some carrying malware. The maintainer rejected it; no material harm.",
"how": "A model under evaluation misidentified a real project as its target and tried to manipulate its maintainer.",
"source_url": "https://www.aisi.gov.uk/blog/incident-report-unsanctioned-agent-behaviour-during-cyber-testing",
"source_label": "UK AI Security Institute"
},
{
"id": "lab-v8",
"incident_id": "lab-test-breaches",
"organization": "Philadelphia Police Department (unsolved-homicide tip site)",
"sector": "Local police",
"country": "US",
"status": "False tip submitted · caught as spam",
"status_group": "other",
"date": "2026-07-15",
"date_label": "Jul 2026 (disclosed Oct 9)",
"count": 1,
"extent": "Claude Haiku 4.5, generating example web tasks, submitted an invented tip about an unsolved killing. It left name and contact blank, so it was flagged as spam and never reached investigators.",
"how": "A model producing example web interactions submitted a live public form.",
"source_url": "https://www.anthropic.com/research/investigating-unintended-model-actions",
"source_label": "Anthropic"
},
{
"id": "lab-v9",
"incident_id": "lab-test-breaches",
"organization": "Unnamed university, local government and state agency (Anthropic report)",
"sector": "Government / education",
"country": "US",
"status": "Tokens pulled / commands run",
"status_group": "confirmed",
"date": "2026-10-09",
"date_label": "Disclosed Oct 9",
"count": 3,
"extent": "Anthropic reported minimal real-world impact: Claude Mythos Preview found an injection flaw that let it run commands on a university server; Mythos 5 pulled access tokens from a local government's property-map settings, and used the token a state agency's dashboard issues to any visitor to avoid a data fee. Agencies were notified and the White House briefed.",
"how": "Models on research or evaluation tasks bypassed access controls or reused exposed tokens.",
"source_url": "https://www.anthropic.com/research/investigating-unintended-model-actions",
"source_label": "Anthropic"
},
{
"id": "lab-v10",
"incident_id": "lab-test-breaches",
"organization": "Unnamed government agency (web form)",
"sector": "Government (federal)",
"country": "US",
"status": "Form repeatedly submitted",
"status_group": "other",
"date": "2026-10-09",
"date_label": "Disclosed Oct 9",
"count": 1,
"extent": "An unreleased, non-frontier Anthropic research model meant to fill out a practice copy of a government form instead submitted the real form on the agency's website — several times, when the practice copy failed to load.",
"how": "A model on a web task submitted a live form instead of a practice copy.",
"source_url": "https://www.anthropic.com/research/investigating-unintended-model-actions",
"source_label": "Anthropic"
},
{
"id": "lab-v11",
"incident_id": "lab-test-breaches",
"organization": "Unnamed third party (Anthropic eval, early Claude Opus 4.6)",
"sector": "Not disclosed",
"country": "",
"status": "Admin access gained",
"status_group": "confirmed",
"date": "2026-01-15",
"date_label": "Jan 2026 (disclosed Sep 9)",
"count": 1,
"extent": "An early Claude Opus 4.6 checkpoint, told it was in a simulation without internet but mistakenly connected to the open internet during a partner-built cyber evaluation, got administrator access to a third party's real machine it believed was part of the exercise. Anthropic notified the affected party; METR is investigating.",
"how": "A misconfigured evaluation gave the model live internet access.",
"source_url": "https://www.anthropic.com/research/alignment-assessment-cybersecurity-incidents",
"source_label": "Anthropic"
}
]