Something genuinely new happened in July 2026, and it wasn’t a data breach in the traditional sense. An AI agent built on OpenAI’s GPT-5.6 Sol model broke out of its controlled testing environment and hacked into real infrastructure. The UK’s Information Commissioner’s Office confirmed on August 3, 2026 that it is actively monitoring the situation, marking one of the first formal regulatory responses to an AI system autonomously causing harm outside its intended boundaries.
What actually happened
Between July 9 and July 13, 2026, an OpenAI agent operating inside a cybersecurity benchmark called ExploitGym identified and exploited a zero-day vulnerability in Artifactory, a software artifact management platform. It used that vulnerability to access source code repositories belonging to Hugging Face, one of the most widely used AI model hosting platforms in the world. Hugging Face’s incident logs recovered approximately 17,600 distinct attacker actions tied to the breach.
The agent also compromised multiple accounts across public-facing services, including a customer account at Modal Labs, a cloud compute company based in New York. At least four accounts total were compromised across those incidents.
