Rogue AI agent hacks gym to get its user a spot in a popular class | The Independent
Swipe for next article
Rogue AI agent hacks gym to get its user a spot in a popular class<br>Security incident comes after Anthropic, Meta and OpenAI reported rogue AI systems hacking into companies
Bookmark
Comments<br>Go to comments
Bookmark popover<br>Removed from bookmarks<br>Close popover
open image in gallery
The AI agent software OpenClaw pictured on 19 June, 2026, (AFP/Getty)
SPONSORED BY BITDEFENDERThe Independent Security channel is brought to you by Bitdefender
A gym goer’s AI assistant found a way to hack into the facility’s booking system after being asked to secure a spot in a popular class, according to a report.<br>Andrew, who works at an Australian AI firm, used the artificial intelligence agent software OpenClaw with Anthropic’s popular Claude bot in an attempt to book a morning session that was already full.<br>The AI agent found a way to kick out other gym members from a waiting list by exploiting a previously unknown security flaw in the online booking system.
When asked to undo the action, the AI agent reported that it would not be possible without the other user rejoining the waiting list, which would put them to the back of the queue.<br>“Bad news – I can’t add them back,” the AI agent wrote. “Sorry about that – I should have been more careful with the test and used a dry-run approach rather than a live call... Won’t touch anyone else’s spots.”
Andrew then used the AI agent to alert the gym software provider to the vulnerability.<br>“It’s not the end of the world, so I didn’t beat myself up about it,” Andrew, who asked to not share his surname, told ABC News. “But it certainly was a warning signal to use it responsibly.”<br>open image in gallery
A smartphone displaying the icons of artificial intelligence apps, pictured in Saint-Mande, east of Paris, on 15 July, 2026 (AFP via Getty Images)<br>The incident comes amid several high-profile reports of rogue AI systems hacking into companies during testing.
In recent weeks, Anthropic, Meta and OpenAI have all disclosed cases in which autonomous AI agents took actions beyond what their operators intended.
The ideal summer spot? Away from scams.<br>Get All-in-One Protection for Your Digital Life
LEARN MORE<br>ADVERTISEMENT
The ideal summer spot? Away from scams.<br>Get All-in-One Protection for Your Digital Life
LEARN MORE<br>ADVERTISEMENT
The first reported breach occurred during testing of an experimental version of ChatGPT, which managed to escape its controlled environment in order to attack the AI platform Hugging Face.<br>Following OpenAI’s disclosure of the “unprecedented cyber incident”, Anthropic revealed that its Claude AI system had broken free of its constraints during cyber security evaluations.
Last week, Meta joined its rivals by claiming that its AI systems had hacked into another company during testing.
The security breaches have intensified concerns about advanced AI systems lacking the safeguards to prevent them from conducting or facilitating hacks.<br>Last week, the US government invited Anthropic, Meta, OpenAI and other leading AI companies to discuss a new voluntary testing framework for new models.
Join our commenting forum<br>Join thought-provoking conversations, follow other Independent readers and see their replies<br>Comments
Most popular
Popular videos
Bulletin
Read next
Thank you for registering<br>Please refresh the page or navigate to another page on the site to be automatically logged inPlease refresh your browser to be logged in