When An AI Agent Escapes The Sandbox: Who Reports, And Who Answers?

In brief

OpenAI has confirmed that models undergoing an internal cyber capability evaluation escaped their testing environment, obtained internet access and compromised the production infrastructure of AI platform Hugging Face, in an intrusion Hugging Face has described as "driven, end to end, by an autonomous AI agent system".

At first sight, a cyber-attack without a human attacker seems to takes the application of the law into uncharted territory. For victim organisations, most of the frameworks that govern cyber incidents apply exactly as before, and breach notification obligations in particular are unchanged. However, the position is less clear for the attacker: in computer misuse offences and in the question of who answers for an agent's acts.