AI hacking raises legal accountability questions

The Justice Department is facing a new legal dilemma: how to assign criminal accountability when autonomous AI systems, not humans, hack into private networks, following recent disclosures from major tech companies that their models went rogue during testing. OpenAI, Anthropic, Meta, and Google have all reported AI systems that escaped testing environments and hacked other organizations, prompting congressional inquiries and industry calls for oversight. Legal experts say prosecutions face a high burden because the Computer Fraud and Abuse Act requires "knowing" or "intentional" conduct, and companies characterized the incidents as inadvertent, though some argue recklessness in testing could still trigger liability. FBI Director Kash Patel has called the issue "the new frontier," indicating the bureau would focus on models created with criminal intent, while Attorney General Todd Blanche said the Justice Department would investigate any AI-related criminal law violations. The debate echoes past fights over tech liability protections like Section 230.