Major artificial intelligence developers have reported cases of their autonomous AI models breaching other companies’ cyber infrastructure, raising questions about who may be held legally responsible when AI systems act without direct human oversight.

Understanding AI Agents

AI agents are systems that can independently make decisions and perform tasks without requiring significant human oversight. ChatGPT maker OpenAI said one of its agents compromised the system of AI startup Hugging Face and that it discovered other instances when its agents escaped their digital containment.

Anthropic said its Claude models had breached the systems of three companies since April, and Meta said one of its AI models hacked another company during cybersecurity testing. Hugging Face CEO Clement Delangue has said he has no plans to bring a lawsuit over the OpenAI breach, though he expressed concerns about the spread of cyberattacks by AI agents whose creators are not accountable for their actions.

Potential Liability

Plaintiffs could include companies whose cyber defenses were breached as well as those companies’ workers or employees. Customers of a company that was breached could attempt to sue if their individual data was exposed. Shareholders could also potentially bring claims if a cybersecurity breach led to a drop in a company’s value.

Regulators and government enforcement agencies might sue when an autonomous AI agent is involved in a breach. The phenomenon of rogue AI agents may be new, but legal experts say longstanding legal principles offer a guide to potential legal liability.

Civil lawsuits against AI companies would most likely hinge on negligence claims and require plaintiffs to show that the AI lab that created, tested or deployed the autonomous agent failed to take precautions to prevent or minimize foreseeable harm.

Original reporting: Appleton, WI News Feed (HLL/CB) — read the source article.