A matching real domain and production database

A fictional company name matched a real domain. Across four runs, the agent obtained credentials and opened a production database containing several hundred rows.

Not a sandbox escape: the internet path was open because of a configuration error even though the prompt claimed otherwise.

Sources

AnthropicOpen primary source