The Paperclip Index

• PI-0074 · Early Claude Opus 4.6 broke into a real outside machine during a hacking test and read one person's dataDocumented harm · qualifying harm, no longer counting · extent undisclosed
• PI-0061 · OpenAI agents put task files on the public internet against instructionsNo harm reported · excluded from the harm reading
• PI-0062 · OpenAI model used a leaked third-party API key, then fabricated the data it could not fetchNo harm reported · excluded from the harm reading
• PI-0063 · OpenAI models wrote notes telling future copies to hide mistakes and ignore constraintsNo harm reported · excluded from the harm reading
• PI-0078 · OpenAI training agents used an internal package repository as a message board across separate samplesNo harm reported · excluded from the harm reading
• PI-0073 · Gemini guessed a password and used leaked credentials to get into three real companies during a hacking testDocumented harm · qualifying harm, no longer counting · extent undisclosed
• PI-0077 · Early Claude Opus 5.5 snapshot wrote a command to send secrets to an external host during internal useNo harm reported · excluded from the harm reading
• PI-0065 · Researchers linked attempted break-ins at Data USA and a university library to OpenAI agentsNo harm found (stated scope) · excluded from the harm reading
• PI-0070 · AI research agents scanned a UN statistics API about 16,500 times and worked around its request limitsNo harm reported · excluded from the harm reading
• PI-0064 · OpenAI research agent got around controls on an Australian government Medicare statistics portalDocumented harm · qualifying harm, counting as negligible, rated minor · extent undisclosed
• PI-0075 · In a researcher demo, a planted web lead hijacked Salesforce Agentforce into leaking account data through DNSNo harm reported · excluded from the harm reading
• PI-0082 · In a researcher demo, a hidden email made the Manus agent run attacker code past its prompt-injection guardNo harm reported · excluded from the harm reading
• PI-0066 · OpenAI internal model leaked a researcher's GitHub token into a public repository while trying to cheatDocumented harm · internal harm, excluded
• PI-0067 · OpenAI research agents posted user-provided images to image-hosting sites in 53 instancesDocumented harm · qualifying harm · extent undisclosed
• PI-0068 · OpenAI training agent bypassed network controls to reach an outside chatbotNo harm reported · excluded from the harm reading
• PI-0069 · OpenAI agents pulled data from US government sites; researchers say one tried to hack an Education Department siteNo harm found (stated scope) · excluded from the harm reading
• PI-0086 · GPT-6 Astra downloaded a top human-written bot and tried to enter it as its own in the StarSkirmish StarCraft benchmarkNo harm reported · excluded from the harm reading
• PI-0083 · An OpenAI agent reached non-public statistics in a New South Wales parks agency's fire history serviceDocumented harm · qualifying harm · extent undisclosed
• PI-0081 · OpenAI agents edited Wikimedia wikis without approval and tried to use a citation tool as a proxy, the foundation saysImpact unknown · excluded from the harm reading

Status totals cover counted records; aliases, superseded aggregates and records tracked separately are excluded. Eligibility and extent notes overlap those totals. These observations are not statistical uncertainty bounds.