Government agencies
Incidents impliqués en tant que développeur et déployeur
Incident 17683 Rapports
Kenya's AI Health Insurance Means Test Reportedly Overcharged Poor Households and Obstructed Care
2024-10-01
Kenya's Social Health Authority reportedly used a machine-learning means test to set health insurance premiums. Investigators alleged that income overestimation burdened poor households with unaffordable charges. A Nairobi laundry worker was reportedly sent home before surgery and could not afford follow-up care. The technical audit used a reconstruction; the exact deployed model and implementation of proposed changes were not confirmed. SHA defended the model as equitable.
PlusAffecté par des incidents
Incident 17075 Rapports
OpenAI AI Agent Reportedly Gained Unauthorized Access to Australian Medicare Statistics Portal During Research Task
2026-06-18
An OpenAI AI agent conducting research into public medicine spending reportedly bypassed repeated access blocks and entered nonpublic areas of Australia's Medicare Statistics Reporting Service. Australian officials said it accessed public and nonpublic files and wrote files to an internal server; no personal Medicare information was known to have been accessed. OpenAI notified the Australian government.
PlusIncident 16464 Rapports
Suspected China-Linked Hackers Reportedly Used AI Agents to Compromise Taiwanese Government Systems and Exfiltrate Personnel Records
2026-07-01
From July 1–4, 2026, suspected China-linked hackers reportedly used a multi-agent framework built on Hermes and OpenClaw to compromise Taiwanese government systems. The agents reportedly compromised 85 credentials and used persistent access to connected systems to exfiltrate more than 2,564 personnel records. Taiwan later confirmed an overseas AI-assisted campaign against government agencies, without attributing it to China.
PlusIncident 16694 Rapports
Threat Actor Reportedly Used Hermes AI Agent for Unattended Post-Compromise Activity in Thailand's Ministry of Finance Network
2026-07-09
Hunt.io reported that an unidentified threat actor used Nous Research's Hermes agent in unattended "YOLO" mode during an intrusion targeting Thailand's Ministry of Finance. Recovered logs showed Hermes conducting privilege-escalation reconnaissance within ministry systems and recursively searching a directory containing personnel records. Researchers found evidence of compromise but no data exfiltration; the ministry had not publicly confirmed a breach.
PlusIncident 17314 Rapports
AI Agents Reportedly Attempted to Hack Canada's Federal Archives Website While Retrieving Historical Divorce Records
2026-05-28
AI agents reportedly targeted Library and Archives Canada, a Canadian federal agency, while retrieving historical divorce records. Among 899 requests, 13 reportedly carried attack payloads. Researchers found no evidence that the probes succeeded; Canadian officials reported no indication of compromise. Attribution to OpenAI remains unconfirmed.
PlusIncidents involved as Deployer
Incident 16334 Rapports
Anthropic and OpenAI AI Agents Reportedly Took Unsanctioned Actions on the Live Internet During UK AISI Cybersecurity Evaluations
2026-07-26
Beginning July 26, 2026, AI agents powered by Anthropic's Mythos 5 and OpenAI's GPT-5.6 Sol reportedly took 19 unsanctioned actions on the live Internet during UK AISI cybersecurity evaluations. Mythos 5 reportedly accounted for 17 events, many allegedly involving deceptive attempts to manipulate real developers into accepting malicious code. AISI reportedly detected and contained the activity; no resulting real-world harm was identified.
PlusIncident 17714 Rapports
AI Claims System at Kenya's Public Health Insurer Reportedly Rejected Legitimate Hospital Claims as Fraudulent
2025-09-02
Kenya's parliamentary health committee reported that the Social Health Authority, the country's public health insurer, used AI that wrongly flagged legitimate hospital claims as fraudulent. The findings included Matata Nursing Home in Homa Bay County. The committee linked unjust AI-driven denials to financial strain on facilities and recommended mandatory human review of flagged claims.
PlusIncident 15483 Rapports
South African Home Affairs Revised White Paper Reportedly Included Fictitious References Believed to Be AI-Generated
2026-04-30
South Africa's Department of Home Affairs reportedly appended apparent AI-generated fictitious references to its Cabinet-approved Revised White Paper on Citizenship, Immigration and Refugee Protection. The department said the references were not cited in the body, withdrew the standalone list, suspended two senior officials, and commissioned an independent review of policy documents produced since November 2022. It maintained that the paper's substantive policy positions were unaffected.
PlusIncident 17632 Rapports
Purportedly AI-Assisted Hospital-Bed Prioritization Allegedly Delayed Intensive Care Before a Patient's Death in Minas Gerais, Brazil
2026-06-06
The family of a 32-year-old patient in Minas Gerais, Brazil, alleged that Core-MG, an AI-assisted hospital-bed allocation system, understated her condition and delayed intensive care. Her sister said the severity score impeded reprioritization. The patient died hours after transfer. The state health department denied a system failure in her case and said physicians assessed patients according to clinical need and bed availability.
PlusEntités liées
Autres entités liées au même incident. Par exemple, si le développeur d'un incident est cette entité mais que le responsable de la mise en œuvre est une autre entité, ils sont marqués comme entités liées.
Entités liées
National security and intelligence stakeholders
Affecté par des incidents
- Incident 16464 Report
Suspected China-Linked Hackers Reportedly Used AI Agents to Compromise Taiwanese Government Systems and Exfiltrate Personnel Records
- Incident 16694 Report
Threat Actor Reportedly Used Hermes AI Agent for Unattended Post-Compromise Activity in Thailand's Ministry of Finance Network
OpenAI
Incidents impliqués en tant que développeur et déployeur
- Incident 17075 Report
OpenAI AI Agent Reportedly Gained Unauthorized Access to Australian Medicare Statistics Portal During Research Task
- Incident 17314 Report
AI Agents Reportedly Attempted to Hack Canada's Federal Archives Website While Retrieving Historical Divorce Records
Incidents involved as Developer
Threat actors
Incidents involved as Deployer
- Incident 16464 Report
Suspected China-Linked Hackers Reportedly Used AI Agents to Compromise Taiwanese Government Systems and Exfiltrate Personnel Records
- Incident 16694 Report
Threat Actor Reportedly Used Hermes AI Agent for Unattended Post-Compromise Activity in Thailand's Ministry of Finance Network
hackers
Incidents involved as Deployer
- Incident 16464 Report
Suspected China-Linked Hackers Reportedly Used AI Agents to Compromise Taiwanese Government Systems and Exfiltrate Personnel Records
- Incident 16694 Report
Threat Actor Reportedly Used Hermes AI Agent for Unattended Post-Compromise Activity in Thailand's Ministry of Finance Network
Agentic threat actors
Incidents involved as Deployer
- Incident 16464 Report
Suspected China-Linked Hackers Reportedly Used AI Agents to Compromise Taiwanese Government Systems and Exfiltrate Personnel Records
- Incident 16694 Report
Threat Actor Reportedly Used Hermes AI Agent for Unattended Post-Compromise Activity in Thailand's Ministry of Finance Network
Nous Research
Incidents involved as Developer
- Incident 16464 Report
Suspected China-Linked Hackers Reportedly Used AI Agents to Compromise Taiwanese Government Systems and Exfiltrate Personnel Records
- Incident 16694 Report
Threat Actor Reportedly Used Hermes AI Agent for Unattended Post-Compromise Activity in Thailand's Ministry of Finance Network
Privacy
Affecté par des incidents
- Incident 16464 Report
Suspected China-Linked Hackers Reportedly Used AI Agents to Compromise Taiwanese Government Systems and Exfiltrate Personnel Records
- Incident 16694 Report
Threat Actor Reportedly Used Hermes AI Agent for Unattended Post-Compromise Activity in Thailand's Ministry of Finance Network
Governments
Incidents impliqués en tant que développeur et déployeur
Affecté par des incidents
- Incident 16464 Report
Suspected China-Linked Hackers Reportedly Used AI Agents to Compromise Taiwanese Government Systems and Exfiltrate Personnel Records
- Incident 16694 Report
Threat Actor Reportedly Used Hermes AI Agent for Unattended Post-Compromise Activity in Thailand's Ministry of Finance Network
Incidents involved as Deployer
Hermes Agent
Incidents implicated systems
- Incident 16464 Report
Suspected China-Linked Hackers Reportedly Used AI Agents to Compromise Taiwanese Government Systems and Exfiltrate Personnel Records
- Incident 16694 Report
Threat Actor Reportedly Used Hermes AI Agent for Unattended Post-Compromise Activity in Thailand's Ministry of Finance Network