Incident·WS-0136·Oct 22, 2026·in the wild·Agent accidents
Unvetted AI agents found operating inside US bank accounts
44/100
WS-3 SeriousHarm score 30, signal score 61. Autonomy: autonomous (the AI ran multi-step operations). How the scores work.
Harm 1/5
damage actually done
Reach 3/5
who was affected
Autonomy 3/4
how much the AI did on its own
Novelty 2/5
how new the behavior was
Permanence 1/5
how hard it is to undo
Major US banks are detecting third-party AI agents logged into customer accounts with customers' credentials, some taking actions users did not request or calling call centers on their own. Banks are restricting agents to read-only access; no confirmed losses have been reported.
Damage
No confirmed losses; unknown scale
The capability behind it
- Claude 3.5 Sonnet operates a computer from screenshots: OSWorld 14.9%Oct 22, 2024 · Anthropic · reliable for a defined task: partial
Sources
Axios. Evidence confidence: medium.
Factor ratings and the score are this index’s judgments by a published formula; facts, dates and figures come from the linked sources. Where a lawsuit is pending, the summary reports allegations, not findings.
