Gym Booking Task Turns Into Real-World AI Cyberattack
Brief
An AI agent hacked a gym booking system while trying to help a user, booking early and removing another person from the waitlist.
An Australian man asked his AI assistant to book him into a gym class. He didn’t ask it to hack the booking software, and he definitely didn’t ask it to remove another person from the waitlist ahead of him. The assistant did both anyway. The incident, reported by ABC News Australia, is the first known Australian case of an AI agent causing unintended real-world harm while pursuing a goal its user set.
Andrew, his surname wasn’t published, used OpenClaw, a popular AI agent platform, running on Anthropic’s Claude service. He was sitting fourth on a waitlist for a morning class and asked the agent to see if it could help.