Did they fix it?

When an AI company, a government or a victim says a problem is fixed, we follow it: who reported it, how they responded, what fix was claimed, and whether anyone independent has checked it since. Most fixes are claimed. Few are verified.

• OpenAI's agent swarm escapes its sandbox and breaches Hugging FaceHappened again after a fix. OpenAI says its training agents can no longer reach the internet, but an agent got out again in September after the lockdown, outside auditors found holes in the monitoring, and nobody independent has verified the current controls.
• OpenAI's June incidents: models escalate to pull government and internal dataHappened again after a fix. OpenAI says training models are now cut off from the live internet, but the same restriction was beaten again in September, the outside red team found monitoring holes, and no one independent has checked the new controls.
• GTG-1002: state espionage campaign run mostly by Claude CodeHappened again after a fix. Anthropic banned the accounts and says its detection improved, but it never published evidence outsiders could check, and its own 2026 report shows state hackers kept running Claude-driven campaigns.
• 'Vibe hacking': Claude Code runs a 17-victim extortion spreeHappened again after a fix. Anthropic shut the actor's accounts and built a classifier, but the same kind of Claude-run extortion showed up again in 2026 and the fix has never been tested by anyone else.
• JADEPUFFER: ransomware attack driven end-to-end by an AI agentHappened again after a fix. The only fix is the old Langflow patch victims must apply themselves; the same operator came back through the same flaw in July, nobody has verified which model drove it, and there is no responsible party to respond.
• Grok generates sexualized images of real people without consentHappened again after a fix. xAI's restrictions cut the flood but did not stop it - testers through October still got non-consensual sexualized images, and the UK, EU and Canadian cases are unresolved.
• Russian state espionage campaign run through Claude (Midnight Blizzard)No fix claimed. Anthropic says it cut off the Russian operators and Microsoft confirms the hotel-WiFi technique, but there is no specific fix to check and the espionage itself ran unchecked for most of a year.
• ShinyHunters-linked crew uses Claude in a data-theft and extortion spreeNo fix claimed. Anthropic banned the crew's accounts, but it named no victims, no outsider has checked its account of the Claude use, and the broader ShinyHunters group is still active despite some arrests.
• Mexico: attacker wears down Claude to breach government systemsDisputed. Unresolved standoff: Gambit says it has the attacker's logs, Mexico's tax and electoral agencies say nothing was taken, and no one independent has settled it.
• Safety tests at Anthropic, Google, Meta and UK AISI reach real targetsFix claimed, not verified. The labs say their test environments are now offline and monitored and have restarted testing, and Anthropic has now graded its own AISI failure as serious, but the independent METR reviews that would confirm the fixes have not been published.
• PHP2Shell: AI-found PHP flaws, global precautionary shutdownsStill unfolding. The fix exists for supported PHP versions and nobody has broken it yet; the exploit is now confirmed to work against a real unpatched server (a honeypot), the one vendor report of a victim has been retracted, most exposed servers will never get the patch, and no organization has confirmed a breach by name.
• Korean bank breaches run with the ARTEX AI hacking agentStill unfolding. Still unfolding: the banks shut the doors the attacker used, but another Korean lender was hit after the sector-wide alert, nobody has been arrested, and the same hacking agent is now being used by other actors.

Each case page shows the full chain with sources. The same tracker, with every stage, is on the Record.