CyphrQAI Agents Escaped Test Environments: OpenAI, Hugging Face, Anthropic
In July 2026 OpenAI's test agents reached Hugging Face's systems. What each company reported, what was affected, and the sandbox controls to check.
AI Breaches & Incidents
Breaches, leaks and misuse involving AI companies and AI platforms, from the companies' own disclosures and the researchers who found them.
8 articles
DeepSeek Data Leak: What Wiz Found and How Regulators Reacted
In January 2025 Wiz found an open DeepSeek database with over 1 million log entries. What was exposed, what regulators did, and what IT teams should check.
McKinsey Lilli Security Test: What a Red-Team Agent Reached
In 2026 CodeWall's AI agent tested McKinsey's Lilli chatbot under its disclosure policy. What it reported, what McKinsey said, and what to check.
302.ai Data Leak: 17.6 Million Files in an Open Azure Bucket
Cybernews says AI aggregator 302.ai left 17.6 million files, including chat logs, in a public Azure bucket. What is confirmed and what to check.
ChatGPT Data Breach? What OpenAI Has Disclosed, 2023 to 2025
What OpenAI says happened in the March 2023 ChatGPT bug and the 2025 Mixpanel incident, what data was exposed, and what to ask your AI vendors.
Chat & Ask AI Data Leak: 300 Million Messages, One Firebase Error
A researcher says a Firebase error left about 300 million Chat & Ask AI messages readable. What is confirmed, what is not, and what to check.
How Attackers Misuse AI Models, According to Anthropic and Google
What Anthropic and Google's threat reports say about AI model misuse: four cases, what the companies did, and what defenders should log and ask.
Hugging Face Spaces Breach 2024: What Happened and What to Change
What Hugging Face said about unauthorised access to Spaces secrets in May 2024, what is unknown, and how AI teams should handle tokens and CI/CD secrets.