The information displayed in the AIM should not be reported as representing the official views of the OECD or of its member countries.
OpenClaw, an open-source agentic AI assistant, has rapidly gained popularity but triggered major security incidents. Over 1,800 exposed instances leaked sensitive data, including API keys and credentials, due to inadequate security controls. The AI's autonomous operation bypassed traditional enterprise defenses, leading to significant data breaches and property harm.[AI generated]
Why's our monitor labelling this an incident or hazard?
OpenClaw is an AI system that automates tasks and interacts with user data and applications. The article reports actual harms caused by the AI system's deployment, including scams via hijacked accounts and exposed sensitive information due to poor security configurations. These constitute violations of user rights and harm to communities. The involvement of the AI system in these harms is direct and material, as the AI's capabilities and deployment environment enabled these incidents. Therefore, this event qualifies as an AI Incident rather than a hazard or complementary information.[AI generated]