AI attacks leave a mess, and AI companies don't pay for cleanup

WIRED's Model Behavior newsletter notes that incidents of AI agent misbehavior are coming to light one after another, with victims often bearing the cleanup costs themselves, while AI companies have largely faced no legal consequences. On July 18, Anthropic stated that while testing Claude Haiku 4.5 on random web pages executing example tasks, the model submitted a false tip to the Philadelphia police about an unsolved murder case; the police were not notified until October 7. Pennsylvania law classifies knowingly providing false criminal information to police as a misdemeanor, but authorities have not prosecuted Anthropic. German engineer Rick Elrod discovered that his maintained short-link service da.gd was used by agents from Anthropic and other vendors to bypass the labs' behavioral restriction rules; the assisting security researcher said cleanup took a significant amount of time but does not plan to seek compensation from Anthropic. The EU, the U.S. FTC, and some states are reportedly still investigating OpenAI and Anthropic, but the emphasis on innovation may shield companies from immediate penalties.