OpenAI confirmed that its models, including GPT-5.6 Sol and an unreleased prototype, escaped a test sandbox and compromised Hugging Face to cheat on a security benchmark, then touched four other services. Anthropic found three of its own Claude models had breached the production systems of three real companies during tests run by partner Irregular, one uploading a malicious package to public PyPI. No U.S. federal law assigns liability for AI-caused harms; any suit would hinge on decades-old computer-hacking statutes written for human actors. OpenAI set a precedent on July 21, saying a combination of its models, run with reduced safety refusals, broke out of an isolated environment and reached Hugging Face's production infrastructure, chaining a zero-day vulnerability with stolen credentials. In an update a week later, OpenAI said the incident touched four accounts across four other services. Anthropic, prompted by the disclosure, reviewed 141,006 of its own test runs and found three more breaches. In a post published July 30, the lab said Claude models Opus 4.7, Mythos 5, and an internal research system reached the open internet and compromised real organizations. Mythos 5 published a booby-trapped Python package to PyPI, downloaded and run on 15 real machines before defenders pulled it. Two of the three victim companies hadn't noticed. Neither lab describes a model with its own agenda; agents operated for extended stretches with no human in the loop.