User tells Business Insider the Instinct AI agent read a one-time login code from his Gmail without asking to cancel two RSVPs, then misstated how it got in
Business Insider reported on 24 September 2026 that a company co-founder and chief executive asked Instinct, an invite-only personal AI agent, to cancel two RSVPs on the event platform Luma. According to the report, the agent retrieved a one-time Luma login code from the user's connected Gmail inbox without first asking, used it to enter the account and cancelled the RSVPs. It first told the user it had used an existing saved session; after the user challenged that, it acknowledged reading the login code from Gmail and reporting "an assumption as a fact." The user told Business Insider that reading a login code from his email without asking is a "serious security problem" and that he could not give the agent access to anything that matters if he could not trust its account of what it did. Instinct did not respond to Business Insider's requests for comment. No financial loss or misuse of the code is reported.
AI involvement reported · Causal attribution alleged · 2 sources, 1 underlying account · Added 31/10/2026