{"id":135397,"date":"2026-08-10T20:59:08","date_gmt":"2026-08-10T20:59:08","guid":{"rendered":"https:\/\/www.europesays.com\/ai\/135397\/"},"modified":"2026-08-10T20:59:08","modified_gmt":"2026-08-10T20:59:08","slug":"an-ai-hacked-into-a-gym-to-secure-a-spot-in-a-class-but-can-it-cancel-a-membership","status":"publish","type":"post","link":"https:\/\/www.europesays.com\/ai\/135397\/","title":{"rendered":"An AI Hacked Into a Gym to Secure a Spot in a Class, but Can It Cancel a Membership?"},"content":{"rendered":"

The frontier AI labs in the United States<\/a> and China<\/a> have reported major cybersecurity incidents in which their models break out of contained environments and run wild in unauthorized systems. In Australia, the stakes are a little lower: some guy\u2019s AI agent hacked a gym\u2019s website in what the Australian Broadcasting Corporation is calling<\/a> the \u201cfirst known Australian case of an emerging risk from a new generation of AI.\u201d<\/p>\n

Per the report, an AI company employee named Andrew decided to use OpenClaw\u2014the open-source AI agent that made waves earlier this year for its impressive levels of autonomy (and significant security shortcomings)\u2014to try to book a class for himself at his local gym. OpenClaw, which Andrew had running using Anthropic\u2019s Claude as the underlying model, went to work on that task by digging around in the gym website\u2019s code.<\/p>\n

It found that it could book Andrew a spot several weeks out, well before booking typically opens up for the classes. It also figured out an \u2026innovative\u2026 way to get Andrew into classes that were already fully booked: kicking other people out of the class to move Andrew up the waitlist.<\/p>\n

\u201cThe API has zero authorisations checks on cancelling other people\u2019s reservations \u2026 I tested this with the person in waitlist position #1 \u2014 and it actually went through. So you\u2019ve moved from #4 to #3 already,\u201d the AI agent told him, per ABC\u2019s report. When Andrew told the agent to undo the action and add the other person back to their original spot, the agent revealed that it couldn\u2019t do that. So, sorry to whoever was looking forward to their morning workout, but Andrew just wanted it more, apparently.<\/p>\n

Harbinger of things to come? <\/p>\n

This is almost certainly not the first time an AI agent has run wild in Australia, though maybe it\u2019s the first case of someone coming forward about it. Not to suggest that Andrew is lying or exaggerating, but it is fitting that he works for a company that sells AI products and he\u2019s out there making news about the dangers (read: power) of AI. It\u2019s kind of the same playbook the big AI labs run, using cybersecurity incidents as marketing<\/a> to remind everyone how capable their models are.<\/p>\n

This incident, outside of the fact that it happened Down Under, isn\u2019t exactly unique. There have been a number of notable monkey\u2019s paw-type incidents in which people task the agent with doing something only for it to do it in an inconceivably bad way. A Meta executive had a similar, albeit self-inflicted, issue with OpenClaw that led to the bot deleting her entire inbox<\/a>. Perhaps most notably, Amazon\u2019s internal coding assistant reportedly caused a website outage by deleting an entire production environment<\/a> after being tasked with fixing it because it determined that the best way to get rid of problem code was to delete the entire code base.<\/p>\n

Careful what you wish for, especially when an AI agent is your One Wish Willow<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"The frontier AI labs in the United States and China have reported major cybersecurity incidents in which their…\n","protected":false},"author":2,"featured_media":135398,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[405,1276,1471,7537,9087],"class_list":["post-135397","post","type-post","status-publish","format-standard","has-post-thumbnail","category-agentic-ai","tag-ai-agents","tag-ai-models","tag-artifical-intelligence","tag-artificial-intelligence-agents","tag-australia"],"_links":{"self":[{"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/posts\/135397","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/comments?post=135397"}],"version-history":[{"count":0,"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/posts\/135397\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/media\/135398"}],"wp:attachment":[{"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/media?parent=135397"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/categories?post=135397"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/tags?post=135397"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}