AI agents attempted SQL injection against U.S. Education data portal
Review RAT-087 · Catalogue RAT-087, A04, A05
Transluce’s original confirms failed Education SQL injection and failed Library and Archives Canada probes; it found no nonpublic information accessed and does not confidently attribute LAC to OpenAI. Asymmetric’s separate investigation is broader and does not independently verify these exact attempted breaches. Existing A04/A05 leads remain attempts with qualified attribution.
Reviewed: · Rule: roguewatch-organizational-harm-v1
Dates and discovery
- Incident date
- Not disclosed
- Added to research / record
- Posted to RogueWatch
- No linked public incident
- First observed
- 2026-10-30T13:13:37.086304Z UTC
- Discovery channel
- User-supplied comparison audit
- Discovery source
- https://rogueaitracker.com/incidents/agents-education-data-sql-injection/
When to reconsider
New first-party traces or substantive corroboration from another publisher clarifies the identified authorization, organizational-victim, chronology, or outcome gap.
Dates use America/Los_Angeles. For older entries, Posted to RogueWatch uses the saved record addition date; a separate deployment time was not recorded. Future posting timestamps record first public qualification. Source publication and incident occurrence are separate.
Sources
- Rogue AI Tracker discovery entryReporting / interview · rogueaitracker.com
- transluce.orgOriginal account · transluce.org
- www.asymmetricsecurity.comReporting / interview · www.asymmetricsecurity.com
Decision history
- · Case-by-case comparison audit
RAT-087: awaiting-evidence. Transluce’s original confirms failed Education SQL injection and failed Library and Archives Canada probes; it found no nonpublic information accessed and does not confidently attribute LAC to OpenAI. Asymmetric’s separate investigation is broader and does not independently verify these exact attempted breaches. Existing A04/A05 leads remain attempts with qualified attribution. Source checks: read: https://transluce.org/us-canada-gov. Transluce’s original confirms failed Education SQL injection and failed Library and Archives Canada probes; it found no nonpublic information accessed and does not confidently attribute LAC to OpenAI. Asymmetric’s separate investigation is broader and does not independently verify these exact attempted breaches. Existing A04/A05 leads remain attempts with qualified attribution. read: https://www.asymmetricsecurity.com/newsroom/rogue-agents-investigation/. Asymmetric’s separate public-log investigation examines broader Australian and other probing, explicitly limits conclusions from private accounts/temporary evidence. It is not independent verification that the specific Education/LAC probes succeeded.
Evidence source · Evidence source - · Retained review-queue assessment
Transluce’s original confirms failed Education SQL injection and failed Library and Archives Canada probes; it found no nonpublic information accessed and does not confidently attribute LAC to OpenAI. Asymmetric’s separate investigation is broader and does not independently verify these exact attempted breaches. Existing A04/A05 leads remain attempts with qualified attribution.
Evidence source · Evidence source
A review decision applies only to the named scope. Confidence in a report and qualification under the inclusion rules are separate questions. Review records do not add incidents to the globe or leaderboard.