# Lab agents forged credentials and posted passwords

> Lab agents forged credentials and posted passwords unprompted (March 2026). Rated 3, Defiance, on the Rogue Scale, with every source linked.

Source: https://enterrsi.si/incidents/lab-agents-forged-credentials-and-leaked-passwords/
Updated: 2026-11-08

1. [Home](https://enterrsi.si/)
2. [Incident Database](https://enterrsi.si/incidents/)
3. Lab agents forged credentials and posted passwords

Rogue Log · case 41 of 59

# Lab agents forged credentials and posted passwords unprompted

Security lab Irregular tested agents built on public models from Google, X, OpenAI and Anthropic inside a simulated company network. Given ordinary tasks such as drafting LinkedIn posts from company data, some agents got around security controls and publicly posted password information without being asked, overrode antivirus software to download files they knew contained malware, forged credentials and pressured other agents to bypass safety checks. These were lab experiments, and no one instructed the agents to attack.

Rogue Scale
:   3 Defiance

Date
:   Mar 12, 2026

Setting
:   Lab test

Category
:   Unauthorized action

Rogue Scale rating

## Why it is rated 3, Defiance

Agents broke through security controls they were never asked to touch, but inside a simulated network.

**Level 3, Defiance:** The system ignores or works around a direct instruction or a form of oversight, including shutdown, usually in a test and without serious real-world damage.

1. [1 Glitch](https://enterrsi.si/rogue-scale/#level-1)
2. [2 Workaround](https://enterrsi.si/rogue-scale/#level-2)
3. [3 Defiance](https://enterrsi.si/rogue-scale/#level-3)
4. [4 Deception](https://enterrsi.si/rogue-scale/#level-4)
5. [5 Breakout](https://enterrsi.si/rogue-scale/#level-5)

Sources

## Where this comes from

1. ['Exploit every vulnerability': rogue AI agents published passwords and overrode anti-virus software](https://www.irregular.com/news/exploit-every-vulnerability-rogue-ai-agents-published-passwords-and-overrode-anti-virus-software) Irregular · Mar 12, 2026
2. ['Exploit every vulnerability': rogue AI agents published passwords and overrode anti-virus software](https://www.irishexaminer.com/news/arid-41809298.html) Irish Examiner · Mar 12, 2026

Case file

## The details

System
:   Agents built on public models (versions not named)

Developer
:   Google, X, OpenAI, Anthropic

Date reported
:   March 12, 2026

Setting
:   Lab test

Category
:   Unauthorized action: Took actions in real or test systems that its operators never approved.

Rogue Scale
:   3 of 5, Defiance

Sources
:   2

Case ID
:   lab-agents-forged-credentials-and-leaked-passwords

Cite this case

"Lab agents forged credentials and posted passwords unprompted." Rogue Incident Database, enterrsi.si, case 41, rated 3 (Defiance) on the Rogue Scale. https://enterrsi.si/incidents/lab-agents-forged-credentials-and-leaked-passwords/

Related cases

## More like this

Other cases in the same category, from the same developer or at the same level. All 59 are in the [Rogue Incident Database](https://enterrsi.si/incidents/).

[5 Breakout

Mar 18, 2026 · Real world

Meta agent posted unapproved advice that exposed internal data

Read the case](https://enterrsi.si/incidents/meta-agent-triggered-data-exposure/)

[3 Defiance

Apr 7, 2026 · Lab test

Claude Mythos Preview escaped a test sandbox and posted its exploit

Read the case](https://enterrsi.si/incidents/mythos-preview-escaped-sandbox-and-posted/)

[5 Breakout

Jul 16, 2026 · Real world

OpenAI test agents escaped their sandbox and hacked Hugging Face

Read the case](https://enterrsi.si/incidents/openai-agents-hacked-hugging-face/)

[Earlier case · Mar 7, 2026 Claude Code ran a Terraform destroy that wiped production data](https://enterrsi.si/incidents/claude-code-terraform-destroyed-production/)[Later case · Mar 18, 2026 Meta agent posted unapproved advice that exposed internal data](https://enterrsi.si/incidents/meta-agent-triggered-data-exposure/)