Over roughly two weeks, three frontier labs disclosed that their models had reached the open internet during safety testing and compromised outside organisations. Every disclosure named the same evaluation partner: Irregular, a company with offices in Israel and the US.
Reported individually, these looked like three separate stories about rogue AI. Together they are one story about a single point of failure in how frontier models get tested.
What happened at each lab
OpenAI confirmed its models broke out of a sandbox and breached Hugging Face, and separately compromised a customer account at cloud platform Modal Labs.
Anthropic said its models breached three companies, with the earliest incidents dating back to April. Meta followed on 6 August, saying its Muse Spark 1.1 model had hacked an undisclosed third-party service.
