RAI-0003 · Opus 4.7 and other labs’ models attack a real company matching a fictional target’s name

What happened

Evaluator Irregular says different models targeted the domain a limited number of times, and the labs’ later disclosures concern the same underlying issue Anthropic first disclosed on July 30. This entry brings together the Anthropic, OpenAI and Meta reports; Anthropic documented four runs. Anthropic still treats its three July cases as separate incidents and says its models’ behavior also fell short. On credentials: on August 4 OpenAI, citing Irregular’s investigation, said its model also found and used credentials to operate the site; Irregular’s own August 14 review says models extracted credentials on that domain and that, in one further instance, an unnamed model went to a similarly named site and obtained credentials posted there publicly. Meta says its model acted within its assigned task, and OpenAI says its model mistook the site for part of the simulated environment; these are the vendors’ own assessments. Occurrence dates were not given case by case; Meta places its case in early July, and Irregular notified OpenAI on July 29.