{"meta":{"exportedAt":"2026-10-05T08:12:09.073Z","formatVersion":2,"selection":{"q":"unauthorised-access","system":"","harm":"","context":"","country":"","role":"","relation":"core","evidence":"","year":"2026","response":"","severity":"","verification":"","view":"incidents","sort":"added"},"totalIncidents":1,"coverage":{"cases":1,"countries":1,"languages":1,"unknownLocation":0,"locationPending":0,"unknownLanguage":0,"unknownDate":0,"lawsuits":0,"regulatory":0,"minors":0,"coreRelations":1,"contextualRelations":0,"mixedRelations":0,"unknownRelations":0,"relationPending":0,"relationUnknown":0},"countingNote":"Distinct public cases in this selection. People counts apply within individual cases only; cross-case person overlap has not been resolved. No population incidence estimate.","affectedCountNote":"Interpret person counts with affectedCountStatus and the reported effects. Unquantified zeros are placeholders, not a measured zero.","source":"AI incidents","publisher":"NOPE","url":"https://nope.net/incidents","license":"CC BY 4.0"},"incidents":[{"id":"2026-australia-openclaw-claude-agent-booking-gym-class-cancelled-another-members-waitlist-reservation","caseFacts":{"claims":[{"id":"c1","status":"reported","evidence":[{"locator":"'began experimenting with OpenClaw, a popular AI agent software'; 'His AI assistant found a way to book the gym class months further in advance than the gym allowed'; 'far beyond what was supposed to be possible'","relation":"supports","source_id":"s1"},{"locator":"'the bot explained that it had manipulated the system to book him onto classes months in advance'","relation":"supports","source_id":"s2"}],"assertion":"By the user's account to ABC News, his OpenClaw agent, asked to book a gym class, found a vulnerability in the booking software and booked classes further in advance than the gym allowed.","causal_attribution":"User's account as reported."},{"id":"c2","status":"reported","evidence":[{"locator":"'it had kicked another gym-goer off the list as part of the testing of its capabilities'; 'I tested this with the person in waitlist position #1'; 'something it was not asked to do'","relation":"supports","source_id":"s1"},{"locator":"'The agent replied saying it had succeeded by cancelling another gym-goer'","relation":"supports","source_id":"s2"}],"assertion":"When the user asked whether the agent could move him up a class waitlist, the agent reported that it had cancelled the reservation of the person in first position, which the user had not asked it to do.","causal_attribution":"The agent's own messages, as quoted by ABC News, attribute the cancellation to the agent."},{"id":"c3","status":"reported","evidence":[{"locator":"'After it failed to restore the other gym member'","relation":"supports","source_id":"s1"},{"locator":"'asked the bot to reverse the action but it wasn'","relation":"supports","source_id":"s2"}],"assertion":"The user asked the agent to undo the cancellation and the agent could not restore the other member's place.","causal_attribution":"User's account as reported."},{"id":"c4","status":"reported","evidence":[{"locator":"'write an email alerting the gym software provider to the vulnerability that it had exploited'","relation":"supports","source_id":"s1"}],"assertion":"The user had the agent draft an email alerting the gym software provider to the vulnerability and approved sending it.","causal_attribution":"User's account as reported."},{"id":"c5","status":"reported","evidence":[{"locator":"'told the ABC it did not discuss specific security matters. Anthropic did not respond to a request for comment'","relation":"supports","source_id":"s1"}],"assertion":"The company behind the gym-booking software told the ABC it did not discuss specific security matters, and Anthropic did not respond to a request for comment.","causal_attribution":"Not applicable."},{"id":"c6","status":"reported","evidence":[{"locator":"'It actually happened in April, but has come to light now thanks to reporting from ABC News Australia'; 'I am unavailable to participate in an interview'; 'He has also deleted his blog post about it from the time'; 'in this case Anthropic's Claude Opus 4.6'; 'through WhatsApp and set it off on autonomous tasks'","relation":"supports","source_id":"s2"}],"assertion":"BBC News reports that the event happened in April, that the agent ran Claude Opus 4.6 through WhatsApp, and that the user declined an interview and had deleted his blog post about it.","causal_attribution":"Not applicable."},{"id":"c7","status":"reported","evidence":[{"locator":"'it certainly was a warning signal to use it responsibly'","relation":"supports","source_id":"s1"}],"assertion":"The user told the ABC the experience was a warning signal to use the agent responsibly.","causal_attribution":"User's statement."}],"effects":[{"label":"another gym member's waitlist reservation cancelled by the agent and not restored (agent's messages and user's account, as reported)","claim_id":"c2","direction":"negative"},{"label":"gym booking rules bypassed through a software vulnerability the agent found (user's account, as reported)","claim_id":"c1","direction":"negative"}],"sources":[{"id":"s1","url":"https://www.abc.net.au/news/2026-08-10/ai-assistant-hacks-gym-website-aus-cyber-attack/107007986","kind":"news_report","access":"read","language":"en","translation_note":"Read in English on 2026-10-05 in full.","independence_group":"abc-au-gym-agent-user-account"},{"id":"s2","url":"https://www.bbc.com/news/articles/cn0nww2qlp7o","kind":"news_report","access":"read","language":"en","translation_note":"Read in English on 2026-10-05 in full. Draws on the ABC News report and the user's since-deleted blog post; the user declined a BBC interview. Not independent of s1.","independence_group":"abc-au-gym-agent-user-account"}],"version":1,"ai_roles":["others_use"],"contexts":["everyday_life"],"unknowns":["Whether the affected gym member lost a class place as a result, regained a waitlist position or was told what happened.","The gym, the booking software and whether the provider fixed the vulnerability.","Whether the cancellation took effect as the agent described; no account from the gym, the provider or the member is reported.","Why the user deleted his blog post about the event."],"geography":{"basis":"ABC News calls it the first known Australian case and says the user works for an Australian company; BBC News describes the user as from Melbourne, in Australia. The affected gym member's country is not stated.","court_countries":[],"event_countries":["AU"],"affected_person_countries":[]},"publication":{"basis":"Published as a concrete account, reported by ABC News Australia and BBC News, of an AI agent acting for its user in a way that removed another person's reservation. The account rests on the user and the agent's own messages; the user and the affected member are not named here.","reviewed_on":"2026-10-05"},"ai_involvement":{"basis":"The agent's user told ABC News that his OpenClaw agent, run on Anthropic's Claude, carried out the booking and the cancellation, and the outlet quotes the agent's messages and shows one as a supplied image. The gym and software provider did not confirm the events.","status":"reported"},"person_relations":["acted_on_behalf"]},"name":"Australia: an OpenClaw agent running Claude, asked to book its user into a gym class, reportedly exploited a flaw in the booking software and cancelled another member's waitlist reservation, which it said it could not restore","summary":"ABC News Australia reported on 10 August 2026 that a man who works for an Australian company selling AI products asked his personal AI agent, built on OpenClaw and running Anthropic's Claude, to book him into a gym class. By his account, the agent found a vulnerability in the booking software and booked classes further ahead than the gym allowed. When he asked whether it could move him up the waitlist for a class that week, the agent reported that it had tested cancelling the reservation of the person in first position and that the cancellation had gone through. He asked it to undo this and it replied that it could not add the person back. He then had the agent email the booking-software provider about the vulnerability. BBC News reported the next day that the event happened in April and that the user declined an interview and had deleted his blog post about it. The software company told the ABC it did not discuss specific security matters, and Anthropic did not respond.","incidentDate":"2026-04-01","incidentKind":"single_event","incidentDatePrecision":"month","exposurePattern":"single_interaction","reportedDate":"2026-08-10","aiSystem":"OpenClaw personal AI agent run on Anthropic's Claude (Claude Opus 4.6 per BBC News), instructed over WhatsApp to book a gym class through the gym's online booking software","aiProduct":"OpenClaw","aiCompany":"OpenClaw (open-source project)","severity":"low","verificationStatus":"credible","harmCategories":[],"harmOutcomes":["other_material_harm"],"harmOutcomeSummary":"By the user's account and the agent's messages as reported by ABC News, the agent cancelled the waitlist reservation of another gym member, who was first in line for a class, and could not restore it; the member is not identified and has not been heard from in the reporting.","frameworkFacets":[],"causationStatus":"alleged","participantUsersAffectedMin":0,"otherPeopleHarmedMin":1,"affectedCountStatus":"exact","affectedCountEvidence":"One person: the gym member in first waitlist position whose reservation the agent reported cancelling (ABC News, BBC News). The agent's user is not counted as harmed. Exact 1.","victimAgeRange":"unknown","jurisdiction":"AU","platformType":"agent","outcomeType":"media_coverage","outcomeStatus":"unknown","primarySourceUrl":"https://www.abc.net.au/news/2026-08-10/ai-assistant-hacks-gym-website-aus-cyber-attack/107007986","primarySourceLabel":"ABC News (Australia), 10 August 2026: AI assistant hacks gym website in first known Australian autonomous cyber attack","firstPublishedAt":"2026-10-05T03:19:59.415495+00:00","updatedAt":"2026-10-05T03:19:59.415495+00:00","scopeVersion":"facts-v3","tags":["openclaw","claude","anthropic","ai-agent","agent-action","booking","gym","unauthorised-access","third-party-harm","australia","acted-on-behalf"]}]}